mediumMultiple Choice
220-1202 Practice Question: A technician is configuring a new server room and…
A technician is configuring a new server room and needs to ensure that only authorized personnel can physically access it. The company wants a solution that does not require replacement of keys or cards if one is lost. Which access control method best meets this requirement?
⚠ Common exam trap
220-1202 often tests the distinction between something you have (card/key), something you know (PIN/combination), and something you are (biometric); the phrase 'does not require replacement if lost' is the giveaway that points to a biometric factor.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement a biometric fingerprint reader
A biometric fingerprint reader authenticates based on a unique physical characteristic of the person, so there is no key, card, or token that can be lost and need replacing. If a user is removed, their biometric template is simply deleted from the system, and no physical credential reissue is required. This directly satisfies the requirement of not replacing keys or cards when one is lost.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a combination lock
Why it's wrong here
Using a combination lock for server room access relies on a shared secret, which presents significant security and administrative challenges. If the combination is compromised through sharing, observation, or an authorized individual's departure, it must be immediately changed. This necessitates manual communication of the new combination to all legitimate users, creating a window of vulnerability and substantial administrative overhead each time the combination needs to be updated or reset.
- ✓
Implement a biometric fingerprint reader
Why this is correct
Implementing a biometric fingerprint reader provides a highly secure and personalized access control solution for a server room. This method authenticates individuals based on their unique physiological characteristics, making it inherently difficult to share or transfer credentials. Since the 'credential' is part of the individual, there are no physical tokens to be lost, stolen, or forgotten, significantly reducing administrative tasks associated with credential reissuance or recovery and enhancing overall security posture.
- ✗
Install a smart card system
Why it's wrong here
Installing a smart card system, while offering stronger authentication than simple PINs when combined with a personal identification number, still relies on a physical token. If a smart card is lost, stolen, or otherwise compromised, it requires immediate deactivation in the system to prevent unauthorized access. Subsequently, a new card must be provisioned and reissued to the legitimate user, a process that incurs administrative costs, potential delays, and logistical challenges in managing the lifecycle of physical credentials.
- ✗
Use a keypad with a PIN code
Why it's wrong here
Utilizing a keypad with a PIN code offers a basic level of access control based on a shared secret, similar to a combination lock, but is highly susceptible to various forms of compromise. PINs can be easily shared among users, observed through shoulder surfing, or extracted via social engineering tactics. If a PIN is forgotten or its confidentiality is breached, it necessitates a manual reset by an administrator, introducing administrative overhead and potential security vulnerabilities if the reset process is not rigorously controlled.
Go deeper
Related to this question
About these practice questions
One of 687 original 220-1202 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official CompTIA exam blueprint
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.