mediumMultiple ChoiceObjective-mapped
220-1202 Practice Question: A technician is deploying a new accounting…
A technician is deploying a new accounting software package across the company. The finance manager requests that the software be installed on their personal laptop, which is not company-managed. Company policy prohibits installing unapproved software on personal devices. How should the technician respond?
⚠ Common exam trap
CompTIA often tests the candidate's ability to balance policy enforcement with customer service, and the trap here is that candidates may choose a technically correct but unhelpful response (like C or D) instead of the one that both follows policy and provides a workable solution.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
"I'm sorry, but company policy doesn't allow installing this software on personal devices. However, I can help you set up remote access to a company workstation that has it."
It upholds the company's security policy by refusing to install unapproved software on a non-managed device, while still providing a practical solution: setting up remote access (e.g., via VPN and Remote Desktop Protocol) to a company workstation that already has the accounting software. This approach ensures compliance with policy and maintains data security by keeping the software within the managed environment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
"I'm sorry, but company policy doesn't allow installing this software on personal devices. However, I can help you set up remote access to a company workstation that has it."
Why this is correct
This response effectively balances adherence to company policy with user support. By stating that installing software on personal devices is prohibited, the technician upholds crucial security, licensing, and data integrity standards. Simultaneously, offering remote access to a company workstation provides a practical, policy-compliant alternative that enables the user to perform their job functions without compromising organizational security or compliance.
- ✗
"I can install it, but you'll have to sign a waiver accepting all risks."
Why it's wrong here
Installing company software on an unauthorized personal device, even with a signed waiver, directly violates established IT security policies and software licensing agreements. This action introduces significant security risks, such as potential data breaches, malware infections, and intellectual property theft, as personal devices typically lack the robust security controls of corporate assets. Furthermore, a waiver does not absolve the company of liability for security incidents stemming from non-compliant installations, making this an unprofessional and high-risk proposition.
- ✗
"That's against policy. Please use a company laptop."
Why it's wrong here
While correctly identifying that the request is against policy, this response is unhelpful and dismissive, failing to provide a constructive solution or alternative for the user. It lacks the professional communication necessary for effective IT support, potentially frustrating the user and hindering their ability to perform their job functions. A technician should aim to understand the user's underlying need and offer compliant solutions rather than simply stating policy without further assistance.
- ✗
"I'll need to get approval from IT management first. Can you email the request?"
Why it's wrong here
This response, while seemingly following a process, unnecessarily delays a resolution and implies that a policy violation might be permissible with management approval, which is often not the case for fundamental security policies. It shifts the burden of finding a solution entirely to the user and management, rather than the technician proactively offering a standard, policy-compliant alternative. A more effective approach would be to immediately offer a standard, policy-compliant solution, such as remote access, without involving unnecessary bureaucratic steps.
Quick reference
VPN Protocol Comparison
| Protocol | Port | Encryption | Authentication | Use Case |
|---|---|---|---|---|
| IKEv2 / IPsec | UDP 500 / 4500 | AES-256 | Certificates / PSK | Site-to-site & remote access |
| SSL / TLS VPN | TCP 443 | TLS 1.3 | Certificates / MFA | Clientless remote access |
| L2TP / IPsec | UDP 1701 | AES (IPsec) | PSK / Certificates | Legacy remote access |
| WireGuard | UDP 51820 | ChaCha20 | Public keys | Modern high-performance VPN |
| PPTP | TCP 1723 | MPPE (weak) | MS-CHAPv2 | Legacy — avoid in production |
PPTP is considered insecure. IKEv2/IPsec and SSL VPN are the current recommended options.
Go deeper
Related to this question
About these practice questions
This 220-1202 question is part of Courseiva's 495-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.