In a Network Access Control (NAC) system, what typically happens to a device that fails a compliance check?

It is automatically reformatted

It is granted full network access

It is placed in a quarantine network with limited access

It is given a warning but allowed to connect

What is the purpose of encrypting data at rest?

To protect stored data from unauthorized access if the storage medium is lost or stolen

To ensure data is not accidentally deleted

To protect data while it is being transmitted over a network

To speed up data access on the storage device

What is the purpose of encrypting data in transit?

To ensure data is not modified while at rest

To protect data from being intercepted while it travels over a network

To protect data stored on a hard drive

To speed up network transmission

A financial firm requires MFA for all remote access. Currently, employees use a VPN with a username and password. The firm wants to add a second factor that is phishing-resistant and does not rely on SMS. Which solution should be implemented?

Require a second password that is changed every 30 days

Deploy hardware security keys (FIDO2) and require them for VPN authentication

Send a one-time passcode via SMS to the employee's phone

Use an authenticator app that generates time-based one-time passcodes

In Role-Based Access Control (RBAC), what is the primary basis for granting permissions?

The user's job function or role within the organization

The user's physical location at the time of access

The user's seniority or tenure in the company

The user's personal preferences for data access

CompTIAA+ Core 2

Domain 2Objective 1

Security Measures 220-1202 Practice Questions (Page 2)

Part of the Security domain, which accounts for 28% of the 220-1202 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 5–9 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

28%of the exam

Questions 6–10

6foundation · easy
In a Network Access Control (NAC) system, what typically happens to a device that fails a compliance check?
Select an answer first
7foundation · easy
What is the purpose of encrypting data at rest?
Select an answer first
8foundation · easy
What is the purpose of encrypting data in transit?
Select an answer first
9expert · hard
A financial firm requires MFA for all remote access. Currently, employees use a VPN with a username and password. The firm wants to add a second factor that is phishing-resistant and does not rely on SMS. Which solution should be implemented?
Select an answer first
10foundation · easy
In Role-Based Access Control (RBAC), what is the primary basis for granting permissions?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 220-1202

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “220-1202” is a trademark of its owner, used for identification only.