mediumMultiple ChoiceObjective-mapped
220-1201 Practice Question: A technician is configuring a corporate iPhone…
A technician is configuring a corporate iPhone for a new executive. The user needs to access company email, calendar, and contacts, but the company requires that all data be encrypted and the device be remotely wipeable. Which configuration step is essential?
⚠ Common exam trap
The 220-1201 exam often tests the misconception that encryption requires a third-party tool or that VPNs provide device-level encryption, when in fact iOS's built-in Data Protection is triggered solely by enabling a passcode.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable the device's passcode and Touch ID/Face ID.
Enabling the device's passcode and Touch ID/Face ID is essential because it activates hardware-backed encryption on iOS devices. Without a passcode, iOS cannot generate the encryption key required to protect data at rest, and remote wipe capabilities are contingent on the device being able to authenticate and enforce management commands. This step directly satisfies the corporate requirements for data encryption and remote wipeability.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Install a third-party antivirus app.
Why it's wrong here
iOS employs a robust sandboxing architecture and strict app store vetting, significantly reducing the threat landscape for traditional viruses and malware compared to other operating systems. Consequently, third-party antivirus applications are largely ineffective and unnecessary for enhancing the device's inherent hardware encryption or enabling remote wipe functionality, which are OS-level features managed by Apple's security framework and MDM protocols.
- ✓
Enable the device's passcode and Touch ID/Face ID.
Why this is correct
Enabling a passcode, along with biometric authentication like Touch ID or Face ID, is a fundamental security measure on iOS devices. This action directly activates the device's hardware-based encryption, ensuring that all data at rest is cryptographically protected. Furthermore, a passcode is a prerequisite for Mobile Device Management (MDM) solutions to initiate a remote wipe command, making it essential for data security and device management in a corporate environment.
- ✗
Disable iCloud backup for the device.
Why it's wrong here
Disabling iCloud backup primarily affects the ability to restore device data from Apple's cloud services, impacting data recovery and migration, but it has no bearing on the device's local hardware encryption status. The encryption of data on the device itself is managed by the operating system and user passcode, independent of cloud backup settings. Similarly, remote wipe functionality, controlled via MDM, operates irrespective of whether iCloud backups are enabled or disabled.
- ✗
Set up a VPN connection for all traffic.
Why it's wrong here
A Virtual Private Network (VPN) primarily establishes an encrypted tunnel for data in transit between the device and a network endpoint, safeguarding communication from eavesdropping over untrusted networks. While crucial for secure data transmission, a VPN connection does not contribute to the device's at-rest hardware encryption, nor does it play any role in enabling or facilitating the remote wipe capability, which is an OS-level security feature managed by MDM.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 220-1201 question from scratch — 972 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1201 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1201 exam.