220-1102 Question 318
Single answerDoor locksA technician is replacing several aging workstations in an accounting office. During the rollout, the office manager mentions that cleaning staff and other employees sometimes enter the room after hours, and one workstation stores sensitive financial data locally for a legacy application. The company cannot add a guard or new access control system this quarter, but it wants a simple physical security improvement for that specific PC. Which action is the BEST recommendation?
- A
Install a door lock on the accounting office to limit physical access to the room
- B
Enable BIOS passwords on all workstations so unauthorized users cannot enter the office
- C
Configure full-disk encryption on the legacy workstation and leave the room unsecured
- D
Move the legacy workstation to an open cubicle so employees can monitor it during the day
Show answer and explanation
Correct answer: A
Explanation
The best answer is to install a door lock on the accounting office because the problem is unauthorized physical access to a room containing a sensitive workstation. On A+ Core 2, physical security controls such as door locks are basic but effective methods for protecting equipment and data from unauthorized access, theft, and tampering. While logical controls like BIOS passwords and encryption are useful, they do not replace controlling entry to a secured area. Best practice is to apply layered security, but when the requirement is a simple physical control for room access, a door lock is the most appropriate recommendation.
- A. Correct.
Correct. A door lock is a direct physical security control that limits unauthorized access to the room containing the sensitive system. In this scenario, the company wants a simple physical improvement without deploying a larger access control solution. Restricting entry to the room is the most appropriate first step because it reduces the chance of theft, tampering, or unauthorized use of the workstation.
- B. Incorrect.
Incorrect. BIOS passwords can help restrict system configuration changes or boot access, but they do not prevent someone from physically entering the room, stealing the device, or tampering with it. The scenario asks for a physical security improvement related to unauthorized room access.
- C. Incorrect.
Incorrect. Full-disk encryption is a valuable security measure for protecting data at rest, especially if a system is stolen. However, it does not address the immediate physical access problem described in the scenario. Leaving the room unsecured still allows unauthorized individuals to enter, damage hardware, or attempt other attacks. Encryption may be a good additional control, but it is not the best answer to this specific question.
- D. Incorrect.
Incorrect. Moving a sensitive workstation to an open cubicle reduces physical security and increases exposure to casual access, shoulder surfing, and theft. Daytime visibility is not a substitute for controlled physical access, especially when the concern is after-hours entry.