CompTIA Updated 220-1202 Exam Questions and Answers by andrew

Comprehensive and Detailed Explanation From Exact Extract:

BitLocker is Microsoft’s full disk encryption technology built into Windows Pro and Enterprise editions. It encrypts the entire drive, protecting data if the device is lost or stolen. BitLocker can use TPM (Trusted Platform Module) and can be configured with PINs or USB keys for added security.

A. Active Directory is for centralized user and policy management in domains.

B. NTFS is the file system format and doesn't provide encryption by itself.

C. EFS (Encrypting File System) encrypts individual files or folders, not the entire drive.

Comprehensive and Detailed Explanation From Exact Extract:

Multifactor authentication (MFA) is considered one of the most effective security measures for cloud environments. It requires users to verify their identity using two or more factors (e.g., password + phone app code), making it significantly harder for external attackers to gain access, even if the primary password is compromised.

B. Encryption is important for data protection but doesn’t prevent unauthorized logins.

C. Backups protect against data loss but don’t stop breaches.

D. Strong passwords are helpful but can still be phished or cracked — MFA adds a critical extra layer.

Comprehensive and Detailed Explanation From Exact Extract:

Facial recognition is a biometric authentication method that ties access to a unique physical feature of the user. Unlike passcodes or pattern locks—which can be easily shared—facial recognition provides a more secure and non-transferable form of access. It also enhances user convenience and is widely supported by modern smartphones.

A. Pattern locks can still be shared and are less secure.

C. Device encryption protects data but does not prevent screen access if a passcode is shared.

D. Multifactor authentication typically applies to app or account access, not basic phone unlocking.

Comprehensive and Detailed Explanation From Exact Extract:

Event Viewer is the primary tool used to investigate system-level errors and logs, including BSODs. When a BSOD occurs, Windows logs the error codes and associated system behavior under “System” logs in Event Viewer. This allows the technician to review crash events, identify error codes (e.g., STOP codes), and pinpoint hardware or driver issues.

B. Performance Monitor is used for real-time performance tracking and trend analysis, not crash logs.

C. System Information displays system specs but not crash logs or events.

D. Device Manager shows device status and driver issues but doesn’t retain error logs related to BSODs.