Objective 2.7
220-1202Given a scenario, apply workstation security options and hardening techniques.
Objective 2.7 sits in Security, which carries 28% of the A+ Core 2 exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.
Objective title verbatim from the official objectives. CompTIA exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
A technician wants to enable BitLocker with the strongest available protection, including verification that the system has not been tampered with while offline. Which hardware component provides this capability?
Correct.
Checked against learn.microsoft.com, July 2026Concept
BitLocker provides its highest level of assurance when paired with a Trusted Platform Module, which checks that the boot process has not been altered while the device was offline.
Why D
Full-disk protection can be unlocked by a passphrase alone, but then nothing has checked the code that runs before the operating system loads. The strongest configuration seals the key against measurements of that early code, which needs a dedicated chip to record them and to withhold the key when they change. Storage and graphics controllers move data; none of them keeps a sealed measurement.
Source
Microsoft Learn: BitLocker overview, checked July 2026BitLocker provides maximum protection when used with a Trusted Platform Module (TPM), which is a common hardware component installed on Windows devices. The TPM works with BitLocker to ensure that a device hasn't been tampered with while the system is offline.
Now you: objective 2.7 questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
An office workstation stores confidential files in a folder used by only one department. The technician needs to grant that department's group read and modify access without exposing the folder to other staff. Which NTFS feature accomplishes this?
Sample question 2 of 3
A device without a TPM needs BitLocker enabled. Which authentication method should the technician select to avoid exposing the system to brute-force attacks against the boot credential?
Sample question 3 of 3
A security team is deciding how to set a hardening standard for several thousand Windows workstations. Which approach is recommended?
Full A+ Core 2 question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.
More objectives in Security
- 2.1 Summarize various security measures and their purposes.
- 2.2 Given a scenario, configure and apply basic Microsoft Windows OS security settings.
- 2.3 Compare and contrast wireless security protocols and authentication methods.
- 2.4 Summarize types of malware and tools/methods for detection, removal, and prevention.
- 2.5 Compare and contrast common social engineering attacks, threats, and vulnerabilities.
- 2.6 Given a scenario, implement procedures for basic small office/home office (SOHO) malware removal.
- 2.8 Given a scenario, apply common methods for securing mobile devices.
- 2.9 Compare and contrast common data destruction and disposal methods.
- 2.10 Given a scenario, apply security settings on SOHO wireless and wired networks.
- 2.11 Given a scenario, configure relevant security settings in a browser.