Objective 4.1

220-1202

Given a scenario, implement best practices associated with documentation and support systems information management.

Objective 4.1 sits in Operational Procedures, which carries 21% of the A+ Core 2 exam. The questions below are original, written from the official objective title above, and each explanation cites the CompTIA page it rests on.

Objective title verbatim from the official objectives. CompTIA exam page ↗

A worked example

Shown solved, with the whole explanation open: this is what every question here carries.

4-1Operational Procedures

A systems administrator requests an exception to a mandatory encryption policy for a legacy application. Before the request can be approved, what must accompany it under established governance practices?

A completed incident report describing the policy violationAn incident report documents an event after it occurs and is not the mechanism for pre-approving an exception.
A signed acceptable use policy acknowledgment from the end userAn acceptable use policy acknowledgment covers user acceptance of usage rules, not approval of a compliance exception.
Business justification and approval from a governance entityCorrect · your answerCorrect: this is the documented requirement for approving policy exceptions.
A splash screen notice displayed to all affected usersA splash screen displays a login-time notice; it does not authorize a policy exception.

Correct.

Checked against learn.microsoft.com, July 2026

Concept

Regulatory compliance requirements often include a formal process for documenting and approving exceptions to security policy.

Why C

Exceptions to established policy require a legitimate business justification and sign-off from an appropriate governance entity before they can take effect.

Source

All exceptions to the Control Frameworks must have legitimate business justification and be approved by an appropriate governance entity within each online services team.

Microsoft Learn: Governance, risk and compliance, checked July 2026
#regulatory compliance#documentation#governance

Now you: objective 4.1 questions

No account needed. The explanation opens when you answer.

Sample question 1 of 3

4-1Operational Procedures

A compliance officer compiles a document that lists each security control, describes its purpose, and cites the specific legal requirement behind it, so auditors can verify alignment. This document primarily supports which documentation and support system?

Sample question 2 of 3

4-1Operational Procedures

An enterprise requires every business unit to apply the same risk assessment methodology so results can be combined into one report reviewed during external audits. This practice primarily supports which documentation and support system?

Sample question 3 of 3

4-1Operational Procedures

After each approved change, a team updates the recorded configuration and confirms specific settings. Which documentation practice is that?

Full A+ Core 2 question bank coming

We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.

Read the sources

These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.

More objectives in Operational Procedures