CompTIA Updated 220-1202 Exam Questions and Answers by fleur

Comprehensive and Detailed Explanation From Exact Extract:

BitLocker is Microsoft’s full disk encryption technology built into Windows Pro and Enterprise editions. It encrypts the entire drive, protecting data if the device is lost or stolen. BitLocker can use TPM (Trusted Platform Module) and can be configured with PINs or USB keys for added security.

A. Active Directory is for centralized user and policy management in domains.

B. NTFS is the file system format and doesn't provide encryption by itself.

C. EFS (Encrypting File System) encrypts individual files or folders, not the entire drive.

A VPN creates a secure tunnel from the user’s home network into the corporate network, providing the necessary routing and access controls for the laptop to reach internal file servers. Without a VPN, the device remains outside the corporate LAN and cannot directly reach protected resources.

A VPN creates a secure tunnel from the user’s home network into the corporate network, providing the necessary routing and access controls for the laptop to reach internal file servers. Without a VPN, the device remains outside the corporate LAN and cannot directly reach protected resources.

Comprehensive and Detailed Explanation From Exact Extract:

Once a malware incident has been confirmed, the immediate next step is to contain the threat. Quarantining infected systems prevents the malware from spreading to other devices and isolates the malicious code for further analysis or remediation.

B. Educating end users is important but occurs later in the incident response process.

C. Disabling System Restore is part of cleanup, not containment.

D. Updating and scanning should occur after the system is quarantined to prevent further infection or spread.

Comprehensive and Detailed Explanation From Exact Extract:

To ensure the authenticity of a downloaded application, the most reliable method is to verify the file’s hash (e.g., SHA256, MD5) against the value provided by the legitimate vendor. If the hash values match, the file has not been altered or tampered with. This verification confirms the integrity and authenticity of the executable.

B. Process IDs are dynamic and not unique to specific software.

C. Running in safe mode doesn’t validate legitimacy—it only runs the app in a minimal environment.

D. File names can be spoofed; matching the name does not prove authenticity.