220-1102 Practice Question: A technician is configuring a new server room and…

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Use a combination lock

  Why it's wrong here

  Using a combination lock for server room access relies on a shared secret, which presents significant security and administrative challenges. If the combination is compromised through sharing, observation, or an authorized individual's departure, it must be immediately changed. This necessitates manual communication of the new combination to all legitimate users, creating a window of vulnerability and substantial administrative overhead each time the combination needs to be updated or reset.

• ✓

  Implement a biometric fingerprint reader

  Why this is correct

  Implementing a biometric fingerprint reader provides a highly secure and personalized access control solution for a server room. This method authenticates individuals based on their unique physiological characteristics, making it inherently difficult to share or transfer credentials. Since the 'credential' is part of the individual, there are no physical tokens to be lost, stolen, or forgotten, significantly reducing administrative tasks associated with credential reissuance or recovery and enhancing overall security posture.

• ✗

  Install a smart card system

  Why it's wrong here

  Installing a smart card system, while offering stronger authentication than simple PINs when combined with a personal identification number, still relies on a physical token. If a smart card is lost, stolen, or otherwise compromised, it requires immediate deactivation in the system to prevent unauthorized access. Subsequently, a new card must be provisioned and reissued to the legitimate user, a process that incurs administrative costs, potential delays, and logistical challenges in managing the lifecycle of physical credentials.

• ✗

  Use a keypad with a PIN code

  Why it's wrong here

  Utilizing a keypad with a PIN code offers a basic level of access control based on a shared secret, similar to a combination lock, but is highly susceptible to various forms of compromise. PINs can be easily shared among users, observed through shoulder surfing, or extracted via social engineering tactics. If a PIN is forgotten or its confidentiality is breached, it necessitates a manual reset by an administrator, introducing administrative overhead and potential security vulnerabilities if the reset process is not rigorously controlled.

Go deeper

Related to this question