220-1102 Question 319
Single answerEquipment locksA technician is deploying new laptops to employees who frequently work in shared office spaces and conference rooms. Management is concerned that a laptop could be quickly removed from a desk while the user steps away for a few minutes. The company wants a low-cost, physical deterrent that allows the laptop to remain usable while secured to furniture. Which solution should the technician recommend?
- A
Install a cable lock in the laptop's security slot and anchor it to a desk
- B
Enable BitLocker full-disk encryption on each laptop
- C
Configure a BIOS/UEFI administrator password
- D
Attach a privacy screen filter to each display
Show answer and explanation
Correct answer: A
Explanation
The best answer is to use a cable lock attached through the laptop's security slot and anchored to a fixed object. In A+ Core 2 physical security topics, equipment locks are used to deter theft of portable devices in open or shared environments. This is a practical, commonly deployed control for laptops in offices, schools, libraries, and conference rooms. Best practice is to combine physical protections such as cable locks with logical protections like full-disk encryption, screen locks, and strong authentication, because physical locks are deterrents rather than absolute prevention. Manufacturer documentation for business laptops commonly refers to these as security slots compatible with cable lock systems.
- A. Correct.
Correct. A cable lock that uses the laptop's built-in security slot is a standard physical security control for deterring opportunistic theft. It allows the device to remain in use while physically tethered to a desk or other fixed object. This directly addresses the requirement for a low-cost equipment lock solution in a shared workspace.
- B. Incorrect.
Incorrect. BitLocker helps protect data if the laptop is lost or stolen, but it does not physically prevent someone from taking the device. A candidate might choose this because encryption is an important laptop security control, but it is not an equipment lock.
- C. Incorrect.
Incorrect. A BIOS/UEFI administrator password can help prevent unauthorized firmware changes or boot configuration changes, but it does not stop someone from picking up and removing the laptop. This option addresses logical access, not physical retention.
- D. Incorrect.
Incorrect. A privacy screen helps reduce visual exposure of sensitive information on the display, especially in public or shared spaces, but it does not secure the laptop to furniture or prevent theft. It is a useful accessory, but not an equipment lock.