220-1201 Questions Bank

Mobile Device Management (MDM) enables administrators to enforce controls on enterprise devices, such as restricting apps, ensuring compliance, and remotely managing security policies.

Why Not B (MFA): Multi-Factor Authentication secures user access but does not control device configurations.

Why Not C (VPN): VPN secures communication but does not enforce device controls.

Why Not D (SSL): SSL secures data in transit but does not provide device management.

CompTIA A+ Exam Reference: Core 2 (220-1102), Section 2.7, device management concepts​.

BitLocker Drive Encryption in Windows requires aTrusted Platform Module (TPM)to encrypt the boot drive securely. The TPM is a dedicated microcontroller designed to secure hardware through integrated cryptographic keys. It validates system integrity during boot and securely stores the encryption keys. If BitLocker cannot find a TPM or it is disabled in BIOS/UEFI, drive encryption cannot proceed.

BitLocker can function without TPM using a USB startup key, but this compromises some security and is not recommended for managed enterprise environments.

A Hardware Security Module (HSM) securely manages cryptographic keys, including those used to protect credit card chips.

Why Not A (TLS): TLS secures data in transit, not encryption key storage.

Why Not B (AMD): AMD refers to processors, not security modules.

Why Not D (ARM): ARM is a processor architecture, not a cryptographic security solution.

CompTIA A+ Exam Reference: Core 2 (220-1102), Section 2.5, cryptographic hardware​.