Objective 2.8

220-1202

Given a scenario, apply common methods for securing mobile devices.

Objective 2.8 sits in Security, which carries 28% of the A+ Core 2 exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

2-8Security

A technician sets up device encryption on a company-issued Windows tablet used by a field employee. Which hardware component works with the encryption feature to confirm the device has not been tampered with while it was offline?

Trusted Platform Module (TPM) chip embedded on the motherboardCorrect · your answerCorrect: this chip performs the offline integrity check required for maximum protection.
Central processing unit that runs the operating system kernelThe CPU executes instructions but does not perform the pre-boot integrity verification.
Graphics processing unit that renders the device lock screenThe GPU only handles display output and plays no role in startup integrity checks.
Universal Serial Bus controller used for external storage drivesA USB controller manages external device I/O and is unrelated to tamper detection.

Correct.

Checked against learn.microsoft.com, July 2026

Concept

Device encryption on a mobile Windows device relies on a hardware root of trust to verify system integrity before the drive is unlocked.

Why A

The TPM works with the encryption feature to check that the device has not been tampered with while offline, providing the integrity verification needed before startup completes.

Source

BitLocker provides maximum protection when used with a Trusted Platform Module (TPM), which is a common hardware component installed on Windows devices. The TPM works with BitLocker to ensure that a device hasn't been tampered with while the system is offline.

Microsoft Learn: BitLocker, checked July 2026
#mobile device security#device encryption#tpm

Now you: objective 2.8 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

2-8Security

A stolen company laptop is recovered still logged in and running. Forensic review shows that although device encryption was active, malware running with administrative rights was still attempting to extract cached NTLM and Kerberos credentials. Which technology is designed to block this specific attack?

Sample question 2 of 3

2-8SecurityChoose 2

An employee uses a personal phone for work email, and the company must protect its data without enrolling the handset. Which two capabilities apply? (Choose two.)

Sample question 3 of 3

2-8Security

A managed phone is reported stolen. Which Intune action returns it to factory settings and removes all data and apps?

Full A+ Core 2 question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Security