CompTIA Updated 220-1201 Exam Questions and Answers by rosanna

Comprehensive and Detailed Explanation From Exact Extract (Aligned With CompTIA A+ 220-1201 Study Guide)

To run Secure Boot, the system must have:

✔ UEFI firmware (not legacy BIOS)

Secure Boot is a UEFI feature that validates bootloaders using digitally signed keys stored in secure firmware.

✔ TPM (Trusted Platform Module)

The TPM stores cryptographic keys in tamper-resistant hardware, enabling secure key management that cannot be altered by normal users.

CompTIA materials describe TPM as essential for enhanced platform security and for storing validated boot keys when Secure Boot is enabled.

Together, UEFI + TPM provide:

Verified boot loader

Hardware-level key protection

Prevention of unauthorized OS tampering

Non-user-controllable secure key storage

Why the other options are incorrect

A. VDI – Virtual desktops; unrelated to Secure Boot hardware requirements.

B. BIOS password – Helps protect firmware settings but is not required for Secure Boot.

E. Disabled boot drive – Irrelevant to Secure Boot.

F. USB permissions – Not part of Secure Boot requirements.

Final Answer: C, D

Badging refers to the use of NFC-enabled ID badges or cards that authenticate users when tapped against a reader for secure print or access control.

From CompTIA A+ 220-1101 Official Study Guide, Objective 3.4 – Secure printing and authentication:

“NFC authentication is commonly implemented using employee badges, allowing secure and convenient access to devices and functions.”

Verified Source:

CompTIA A+ Core 1 (220-1101) Official Study Guide, Chapter 3: Secure Print Solutions

CompTIA Exam Objectives 220-1101, Domain 3.4

============

A private cloud provides cloud resources that are dedicated to a single organization, giving that organization exclusive use of the underlying infrastructure. This model is selected when a company needs tighter control over security, compliance, performance, and customization than what is typically available in a multi-tenant public cloud environment. Private cloud resources can be hosted on-premises in the organization’s own data center or hosted by a third party, but the key point is exclusive access—the hardware and cloud environment are not shared with unrelated customers.

A public cloud is shared among multiple customers (multi-tenant), so it is not exclusive. A hybrid cloud combines two environments, usually a private cloud and a public cloud, which can help with flexibility and scaling, but it is not defined as exclusive because part of it may be public. A community cloud is shared by organizations with common needs (such as similar compliance requirements), meaning it is shared among multiple entities rather than exclusive to one organization. Therefore, the cloud model that provides exclusive access to resources is Private.

A Trusted Platform Module (TPM) is a hardware chip used to enable encryption technologies such as BitLocker, providing secure key storage for system-wide encryption.

From CompTIA A+ 220-1101 Official Study Guide, Objective 3.5 – Security features:

“A TPM chip is required for system encryption, storing encryption keys securely on the hardware.”

Verified Source:

CompTIA A+ Core 1 (220-1101) Official Study Guide, Chapter 3: Security Hardware

CompTIA Exam Objectives 220-1101, Domain 3.5

============