easyMultiple ChoiceObjective-mapped
220-1102 Practice Question: A small business wants to ensure that only…
A small business wants to ensure that only authorized personnel can access the server room. The budget is limited, and they need a simple, cost-effective solution. Which logical security control should they implement first?
⚠ Common exam trap
CompTIA often tests the distinction between logical and physical security controls, and the trap here is that candidates confuse a strong password policy (a logical control for user accounts) with a physical access control mechanism for a server room door.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Require a smart card or key fob to unlock the door.
A smart card or key fob provides a simple, cost-effective logical access control for the server room door. It authenticates users via a physical token and a PIN or proximity reader, which is far cheaper than biometric systems and more reliable than a password policy that doesn't control physical entry. This directly restricts physical access to authorized personnel without ongoing costs like a security guard.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Install a biometric fingerprint scanner on the door.
Why it's wrong here
A biometric fingerprint scanner introduces a hardware cost and ongoing maintenance burden that exceeds the limited budget stated in the scenario, and it does not address the logical access control layer—the question asks for a logical security control, not a physical one. This option is tempting because biometrics are often marketed as high-security for physical door access, and in a scenario with a larger budget and a requirement for physical entry control, it would be the correct choice.
- ✓
Require a smart card or key fob to unlock the door.
Why this is correct
Smart cards and key fobs provide a logical access control mechanism by requiring a physical token for authentication to an electronic door system. These devices are relatively inexpensive to implement and manage, offering a scalable solution for a small business to ensure only authorized personnel can physically access a restricted area. Their access privileges can be centrally managed and quickly revoked or modified, enhancing both security and operational efficiency.
- ✗
Implement a strong password policy for all user accounts.
Why it's wrong here
Implementing a strong password policy primarily addresses logical access to digital systems and data, such as user accounts on computers, network resources, or applications. While crucial for overall cybersecurity posture, it does not provide a mechanism to control physical entry through a door. Passwords protect information and digital assets, not physical spaces, making this option irrelevant for securing a physical server room entrance.
- ✗
Hire a security guard to check IDs at the entrance.
Why it's wrong here
Hiring a security guard constitutes a physical security control, relying on human presence to deter, monitor, and verify access to a restricted area. While effective for high-security environments, this solution is generally expensive due to ongoing salary and benefits, making it less suitable for a small business with budget constraints. Furthermore, it's a reactive measure and doesn't offer the granular, automated logical access logging and rapid revocation capabilities of electronic systems.
Go deeper
Related to this question
Learn chapter
File Systems: NTFS, FAT32, exFAT
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Access control
Access control is the security practice of determining who or what is allowed to view, use, or enter a resource, and under what conditions.
About these practice questions
Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.