220-1102 Question 159
Single answerPrivacyA company issues laptops to sales staff who frequently work in airports, hotels, and customer lobbies. Management is concerned that sensitive customer data could be exposed to people nearby while employees are working in public places. Which solution would BEST reduce this privacy risk without significantly affecting normal laptop use?
- A
Install a privacy screen filter on each laptop display
- B
Enable BitLocker full-disk encryption on each laptop
- C
Require employees to use a VPN when connecting to public Wi-Fi
- D
Configure the laptops to lock automatically after 5 minutes of inactivity
Show answer and explanation
Correct answer: A
Explanation
The best answer is the privacy screen filter because the scenario focuses specifically on preventing visual disclosure of sensitive information in public spaces. In A+ Core 2, privacy-related controls often include preventing shoulder surfing, safeguarding PII, and using physical protections appropriate to the environment. BitLocker, VPNs, and automatic locking are all valid security best practices, but they address different threats: data at rest, data in transit, and unattended access. Industry best practices from security awareness programs and endpoint protection guidance commonly recommend privacy filters for users who regularly handle sensitive data in public-facing environments.
- A. Correct.
Correct. A privacy screen filter narrows the viewing angle of the display so people beside or behind the user cannot easily read on-screen information. In this scenario, the primary concern is visual exposure of customer data in public areas, often called shoulder surfing. A privacy filter directly addresses that privacy risk while allowing users to continue working normally.
- B. Incorrect.
Incorrect. BitLocker full-disk encryption protects data at rest if the laptop is lost or stolen, but it does not prevent nearby people from viewing sensitive information while the employee is actively using the device. This is a good security control, but it does not best address the specific privacy issue described.
- C. Incorrect.
Incorrect. A VPN protects data in transit across untrusted networks, such as public Wi-Fi, by encrypting network traffic. However, it does nothing to stop someone physically nearby from seeing confidential data displayed on the screen. This option addresses network security, not visual privacy.
- D. Incorrect.
Incorrect. Automatic screen locking helps protect unattended devices from unauthorized access, which is an important security measure. However, the problem in the scenario occurs while employees are actively using their laptops in public. A screen lock would not prevent shoulder surfing during normal use.