220-1101 · Question #474
A systems administrator is working to ensure access to corporate laptops is limited to authorized users. The administrator has already implemented a password policy. Which of the following would be th
The correct answer is B. Biometric scanner. A biometric scanner (fingerprint reader or facial recognition) adds a 'something you are' authentication factor on top of the existing 'something you know' password factor, implementing multi-factor authentication (MFA). MFA is one of the most effective ways to restrict access to
Question
A systems administrator is working to ensure access to corporate laptops is limited to authorized users. The administrator has already implemented a password policy. Which of the following would be the best option to help the administrator secure the corporate resources?
Options
- ATrusted Platform Module
- BBiometric scanner
- CLaptop lock
- DEncryption
How the community answered
(48 responses)- A10% (5)
- B79% (38)
- C6% (3)
- D4% (2)
Explanation
A biometric scanner (fingerprint reader or facial recognition) adds a 'something you are' authentication factor on top of the existing 'something you know' password factor, implementing multi-factor authentication (MFA). MFA is one of the most effective ways to restrict access to authorized users since biometric data is unique and cannot be shared or easily stolen like a password. A Trusted Platform Module (A) is used for hardware-based encryption key storage but does not directly authenticate users at login. A laptop lock (C) provides physical security against theft but does not control user access. Encryption (D) protects data if the device is stolen but is a data protection control, not an access authentication control.
Topics
Community Discussion
No community discussion yet for this question.