220-1102 Question 540
Single answerContent filteringA small business asks a technician to reduce the risk of employees accessing malicious or inappropriate websites during work hours. The company wants a solution that applies to all users on the network without requiring software changes on each individual PC. Which action BEST meets this requirement?
- A
Configure content filtering on the company's firewall or secure web gateway to block categories of websites
- B
Enable full-disk encryption on each workstation to prevent users from browsing unsafe websites
- C
Install a hardware keylogger on shared PCs to monitor which sites employees visit
- D
Create local administrator accounts for employees so they can manage their own browser security settings
Show answer and explanation
Correct answer: A
Explanation
The best answer is to configure centralized content filtering at the network edge, typically through a firewall, unified threat management device, DNS filtering service, or secure web gateway. In A+ Core 2, content filtering is commonly associated with controlling access to inappropriate or risky web content and reducing exposure to malware and phishing. A centrally managed solution is preferred when an organization wants consistent enforcement for all users without manual configuration on each PC. This aligns with common security best practices such as least privilege, centralized policy enforcement, and layered defense. Vendor and standards documentation from major firewall and web security providers consistently describes URL/category filtering as a network control for enforcing acceptable use and reducing web-based threats.
- A. Correct.
This is correct. Network-based content filtering on a firewall, UTM appliance, or secure web gateway can enforce web access rules for all users centrally. It is a practical way to block categories such as malware, phishing, adult content, gambling, or social media without touching every endpoint. This matches the requirement to protect the whole network through a centralized control.
- B. Incorrect.
This is incorrect. Full-disk encryption protects data at rest if a device is lost or stolen, but it does not filter web traffic or block access to unsafe or inappropriate sites. Someone might choose this because it is a security control, but it addresses a different problem.
- C. Incorrect.
This is incorrect. A keylogger is not an appropriate content-filtering tool and introduces serious privacy, legal, and security concerns. It records activity rather than proactively blocking access. Someone might choose this thinking monitoring is enough, but the scenario asks for preventing access through content filtering.
- D. Incorrect.
This is incorrect. Giving users local administrator rights generally weakens security and does not provide centralized enforcement. Users could also disable or alter settings. Someone might choose this because browser settings can block some content, but that approach is inconsistent, difficult to manage, and contrary to least-privilege best practices.