220-1102 Question 541
Single answerPhysical placement/secure locationsA medical office is renovating its reception area and wants to reduce the risk of unauthorized access to systems that handle patient information. A technician is asked to recommend the BEST physical placement change for a workstation used by reception staff to check in patients. Which of the following should the technician recommend?
- A
Place the workstation on the front counter so patients can easily point to information on the screen
- B
Move the workstation to a staff-only area behind the reception desk, with the monitor positioned so it is not visible to patients in the lobby
- C
Install the workstation in the waiting room so staff can assist patients more quickly during busy times
- D
Relocate the workstation near the public entrance so visitors can sign in directly on the main office computer
Show answer and explanation
Correct answer: B
Explanation
The best answer is to place the workstation in a secure staff-only location and position the screen to prevent observation by unauthorized individuals. In A+ Core 2, physical placement and secure locations are key administrative and technical safeguards because they help prevent shoulder surfing, casual tampering, and unauthorized access. This is especially important in environments such as healthcare offices where systems may display protected or confidential information. Common security best practices include keeping sensitive systems away from public areas, limiting physical access to authorized staff, and positioning monitors to reduce visibility from lobbies, hallways, or customer-facing spaces. These practices align with general security guidance from organizations such as NIST, which emphasizes physical access controls and protecting information systems from unauthorized physical access and observation.
- A. Incorrect.
This is incorrect because placing the workstation on the front counter increases the risk of shoulder surfing, accidental access, and tampering by visitors. Even if convenient for workflow, systems that display or process sensitive information should not be positioned where unauthorized individuals can easily view the screen or reach the keyboard.
- B. Correct.
This is correct because placing the workstation in a staff-only area and orienting the monitor away from public view follows physical security best practices. It reduces the chance of unauthorized viewing of patient information, lowers the risk of someone interacting with the device, and supports basic privacy and access control requirements in environments handling sensitive data.
- C. Incorrect.
This is incorrect because a waiting room is a public space with a high risk of unauthorized viewing, theft, and misuse. Although it may seem convenient for assisting patients, placing a staff workstation there weakens physical security and exposes confidential information to unnecessary risk.
- D. Incorrect.
This is incorrect because putting the main office workstation near the public entrance increases exposure to unauthorized users and does not separate public interaction from internal systems. A public-facing kiosk, if needed, should be purpose-built and restricted, rather than using a standard staff workstation that may have access to sensitive records.