220-1102 Question 372
Single answerFingerprintA company deploys Windows 11 laptops with fingerprint readers for users who work in the field. One employee reports that the laptop now rejects their fingerprint after they cut and scraped the finger they originally enrolled. They must regain quick sign-in without lowering security for the device. Which action should the technician recommend FIRST?
- A
Disable Windows Hello and switch the user to automatic sign-in until the finger heals
- B
Sign in with the user's PIN or password, then enroll an additional fingerprint using another finger
- C
Clean-install the fingerprint reader driver and remove all sign-in methods except fingerprint
- D
Reduce the fingerprint matching sensitivity in BIOS so partial prints are accepted
Show answer and explanation
Correct answer: B
Explanation
This scenario tests practical support of biometric authentication in Windows environments. Fingerprint authentication is convenient, but biometric factors can fail temporarily due to cuts, moisture, dirt, or changes to the skin. Best practice is to use a secure fallback method such as a PIN or password, then re-enroll or add another fingerprint. In Windows Hello for Business and standard Windows Hello sign-in workflows, users commonly set up a PIN alongside biometrics specifically for recovery and fallback. A technician should avoid weakening security controls, such as enabling automatic sign-in or trying to lower matching requirements. The most appropriate first action is to have the user authenticate with an approved alternate method and enroll another finger.
- A. Incorrect.
Incorrect. Automatic sign-in reduces security because it removes an important authentication control on a business laptop. If the enrolled finger is temporarily unusable, the correct approach is to use an approved fallback authentication method, not to bypass sign-in protections.
- B. Correct.
Correct. Windows Hello supports fallback authentication such as a PIN or password, and users can enroll multiple fingerprints. If the original finger is injured or temporarily unreadable, signing in with the PIN or password and then adding another finger is the most practical and secure first step.
- C. Incorrect.
Incorrect. Reinstalling the driver is not the best first action because the symptom is tied to the user's finger being physically altered, not necessarily a hardware or driver failure. Removing other sign-in methods would also make account recovery more difficult and less resilient.
- D. Incorrect.
Incorrect. Fingerprint matching thresholds are not typically adjusted as a normal support task for A+ objectives, and lowering sensitivity would weaken security by increasing the chance of false accepts. Standard best practice is to use the existing fallback method and re-enroll biometrics as needed.