Exam 220-1102 All Questions

View all questions & answers for the 220-1102 exam

Exam 220-1102 topic 1 question 115 discussion

Actual exam question from CompTIA's 220-1102

Question #: 115
Topic #: 1

The findings from a security audit indicate the risk of data loss from lost or stolen laptops is high. The company wants to reduce this risk with minimal impact to users who want to use their laptops when not on the network. Which of the following would BEST reduce this risk for Windows laptop users?

A. Requiring strong passwords
B. Disabling cached credentials
C. Requiring MFA to sign on
D. Enabling BitLocker on all hard drives

Show Suggested Answer

Suggested Answer: D 🗳️

by Manzer at Sept. 13, 2022, 7:43 p.m.

Comments

Submit Cancel

longbob

Highly Voted 2 years, 4 months ago

Selected Answer: D

The question has two requirements. Prevent data loss, minimal impact to users. MFA would impact users, they have to do an extra step to login. BitLocker encrypts the entire hard drive, thereby making the information "unreadable" in case of a lost laptop. Answer is D

upvoted 18 times

...

Manzer

Highly Voted 2 years, 5 months ago

Selected Answer: D

Bit locker is the answer.

upvoted 18 times

...

crazymonkeh

Most Recent 11 months, 2 weeks ago

Selected Answer: D

The answer is definitely D: Bitlocker It is not "C" because the HDD can simply be removed from the case, and use a drive reader to directly access the files themselves without the use of a Windows Login/MFA.

upvoted 3 times

...

Mehsotopes

1 year, 6 months ago

Answer could be C because it simply involves knowledge factor & possession factor without requiring you to tamper with all the data on disks.

upvoted 1 times

...

solaWONDER

1 year, 7 months ago

To reduce the risk of data loss from lost or stolen laptops for Windows laptop users, the BEST option is option D: Enabling BitLocker on all hard drives. BitLocker is a full disk encryption feature available in Windows operating systems. By enabling BitLocker, the data on the laptop's hard drives is encrypted, providing protection against unauthorized access in case of loss or theft. This ensures that even if the physical device is compromised, the data remains encrypted and inaccessible to unauthorized individuals.

upvoted 2 times

...

solaWONDER

1 year, 7 months ago

The best way to reduce the risk of data loss from lost or stolen laptops is to enable BitLocker on all hard drives. BitLocker is a full disk encryption feature that encrypts all of the data on a laptop's hard drive. This makes it very difficult for unauthorized users to access the data on the laptop if it is lost or stolen.

upvoted 1 times

...

Brightside

1 year, 9 months ago

Key phrases here are ‘reduce the risk’ & ‘BEST’ MFA fits those two .

upvoted 1 times

rick2461

1 year, 6 months ago

other key phrases are "minimal impact" and "prevent data loss". MFA is an extra step for users, and MFA itself is useless without encryption. Answer: D

upvoted 3 times

...

max319

1 year, 11 months ago

D is just not it, BitLocker will impact performance heavily. For example, With my T7300 2.0GHz and Kingston V100 64gb SSD the results are: Bitlocker off → on Sequential read 243 MB/s → 140 MB/s Sequential write 74.5 MB/s → 51 MB/s Random read 176 MB/s → 100 MB/s Enabling MFA negates the issue with stolen laptops because there is a multitude of ways to use mfa, something you have, something you know, something you are. Requiring users to use biometrics in conjunction with a password will have minimal impact. Therefore I am choosing C.

upvoted 1 times

mtrJacky

1 year, 11 months ago

If using MFA, how can I protect the data as I can remove the hdd or ssd to another computer to read the data. Although "D" will affrect the speed, but it would be the best answer.

upvoted 4 times

...