What is the primary function of an access control list (ACL)?

To define which users or groups can access specific resources

To encrypt data stored on a server

To monitor network traffic for suspicious activity

To authenticate users when they log in

A company allows employees to connect personal laptops to the office network. The security team wants to ensure that only company-managed devices with up-to-date antivirus can access internal resources. Which technology should be deployed?

A firewall that blocks all inbound traffic from the internet

Network Access Control (NAC) that checks device compliance before granting access

A strong WPA2 password for the Wi-Fi network

A VPN that encrypts all traffic from personal laptops

A company has 200 employees across three departments: HR, Finance, and IT. The security team wants to implement least privilege. HR staff need access to employee records, Finance staff need access to payroll data, and IT staff need access to both but should not be able to modify HR records. Additionally, all access to sensitive data must require MFA. Which approach best meets these requirements?

Assign permissions directly to each user and require MFA only for the IT group

Create role-based groups for HR, Finance, and IT; assign permissions to groups; and enable MFA for all groups that access sensitive data

Create a single 'All Staff' group with full access to all data and enable MFA for everyone

Use mandatory access control with security labels and require MFA for all users

A hospital stores patient records on a file server. A security audit requires that the data be unreadable if the physical hard drives are stolen. The hospital also needs to maintain fast access for authorized staff. Which solution should the administrator implement?

Enable BitLocker Drive Encryption on the file server's operating system and data volumes

Encrypt individual patient files with EFS and store the encryption keys in the user profiles

Implement a database-level encryption feature within the patient records application

Use a RAID array to protect against drive failure

CompTIAA+ Core 2

Domain 2Objective 1

Security Measures 220-1202 Practice Questions (Page 5)

Part of the Security domain, which accounts for 28% of the 220-1202 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~10–17 in this domain), expect 5–9 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

28%of the exam

Questions 21–25

21foundation · easy
What is the primary function of an access control list (ACL)?
Select an answer first
22application · medium
A company allows employees to connect personal laptops to the office network. The security team wants to ensure that only company-managed devices with up-to-date antivirus can access internal resources. Which technology should be deployed?
Select an answer first
23foundation · easy
What encryption standard is used by WPA2 for data confidentiality?
Select an answer first
24expert · hard
A company has 200 employees across three departments: HR, Finance, and IT. The security team wants to implement least privilege. HR staff need access to employee records, Finance staff need access to payroll data, and IT staff need access to both but should not be able to modify HR records. Additionally, all access to sensitive data must require MFA. Which approach best meets these requirements?
Select an answer first
25application · medium
A hospital stores patient records on a file server. A security audit requires that the data be unreadable if the physical hard drives are stolen. The hospital also needs to maintain fast access for authorized staff. Which solution should the administrator implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 220-1202

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “220-1202” is a trademark of its owner, used for identification only.

Security Measures 220-1202 Practice Questions (Page 5)

Questions 21–25

What is the primary function of an access control list (ACL)?

A company allows employees to connect personal laptops to the office network. The security team wants to ensure that only company-managed devices with up-to-date antivirus can access internal resources. Which technology should be deployed?

What encryption standard is used by WPA2 for data confidentiality?

A hospital stores patient records on a file server. A security audit requires that the data be unreadable if the physical hard drives are stolen. The hospital also needs to maintain fast access for authorized staff. Which solution should the administrator implement?

Keep studying — Security