mediumMultiple ChoiceObjective-mapped
220-1102 Practice Question: A technician is configuring a new server rack in…
A technician is configuring a new server rack in a shared office space. Which physical security measure should be applied to prevent unauthorized physical access to the servers?
⚠ Common exam trap
A common mix-up: candidates confuse logical security controls (like BitLocker or BIOS passwords) with physical security controls, failing to recognize that only a physical barrier like a lock prevents direct hardware access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use rack-mount locks on each server chassis
Rack-mount locks provide a direct physical barrier that prevents unauthorized individuals from opening the server chassis and accessing internal components, such as hard drives, memory, or cables. In a shared office space, this is the most effective measure to deter tampering, theft, or accidental damage at the rack level.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Install a door alarm on the office entrance
Why it's wrong here
Installing a door alarm on the office entrance provides a perimeter security layer, alerting staff to unauthorized entry into the room where the server rack is located. However, it does not directly secure the server rack itself or the individual servers within it. An intruder who bypasses or disarms the alarm could still freely access and tamper with the server hardware once inside the office, making it an insufficient direct security measure for the rack.
- ✓
Use rack-mount locks on each server chassis
Why this is correct
Rack-mount locks are designed to physically secure individual server chassis within the rack, preventing them from being slid out, removed, or opened without authorization. These specialized locks directly attach to the server's mounting rails or front panel, creating a physical barrier against theft or internal component tampering. This measure provides direct hardware security, making it the most effective option for preventing unauthorized physical access to the server units themselves.
- ✗
Enable BitLocker on all server drives
Why it's wrong here
Enabling BitLocker on server drives is a robust data encryption solution that protects data at rest by encrypting the entire volume. While crucial for data confidentiality, especially if a drive is stolen or removed, it does not provide any physical security for the server hardware itself. An unauthorized individual could still physically access, remove, or tamper with the server chassis and its components, even if the data on the drives remains encrypted.
- ✗
Configure a strong BIOS password
Why it's wrong here
Configuring a strong BIOS password restricts unauthorized individuals from altering system boot settings or booting the operating system without proper credentials. This is a critical logical security control for preventing unauthorized configuration changes or OS access. However, a BIOS password does not physically secure the server chassis from being opened, components being removed, or the entire server unit being stolen from the rack.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 220-1202 question from scratch — 495 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.