nerdexam
CompTIA

220-1101 · Question #474

A systems administrator is working to ensure access to corporate laptops is limited to authorized users. The administrator has already implemented a password policy. Which of the following would be th

The correct answer is B. Biometric scanner. A biometric scanner (fingerprint reader or facial recognition) adds a 'something you are' authentication factor on top of the existing 'something you know' password factor, implementing multi-factor authentication (MFA). MFA is one of the most effective ways to restrict access to

Mobile devices

Question

A systems administrator is working to ensure access to corporate laptops is limited to authorized users. The administrator has already implemented a password policy. Which of the following would be the best option to help the administrator secure the corporate resources?

Options

  • ATrusted Platform Module
  • BBiometric scanner
  • CLaptop lock
  • DEncryption

How the community answered

(48 responses)
  • A
    10% (5)
  • B
    79% (38)
  • C
    6% (3)
  • D
    4% (2)

Explanation

A biometric scanner (fingerprint reader or facial recognition) adds a 'something you are' authentication factor on top of the existing 'something you know' password factor, implementing multi-factor authentication (MFA). MFA is one of the most effective ways to restrict access to authorized users since biometric data is unique and cannot be shared or easily stolen like a password. A Trusted Platform Module (A) is used for hardware-based encryption key storage but does not directly authenticate users at login. A laptop lock (C) provides physical security against theft but does not control user access. Encryption (D) protects data if the device is stolen but is a data protection control, not an access authentication control.

Topics

#Access control#Authentication#Biometrics#Laptop security

Community Discussion

No community discussion yet for this question.

Full 220-1101 Practice