Chapter 2 of 4 · CompTIA A+ 220-1202
Security
Physical and logical controls, Windows security, wireless, malware, social engineering, hardening and browsers.
- 13topics
- 55 minfast track
- 6diagrams and exhibits
- 28%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Physical Security MeasuresLearn physical security controls for A+ Core 2: access control vestibules, badge readers, biometrics, cameras, alarms, locks…Diagram5 min
- 2Logical Security and Active DirectoryUnderstand least privilege, ACLs, multifactor authentication, email filtering, Active Directory and mobile device management in…Diagram5 min
- 3Windows Accounts and NTFS PermissionsConfigure Windows accounts, groups, sign in options, User Account Control and NTFS permissions, including inheritance and what…Diagram4 min
- 4Defender, Firewall and EncryptionConfigure Microsoft Defender Antivirus, Windows Defender Firewall, BitLocker, BitLocker To Go and the Encrypting File System to…4 min
- 5Wireless Security and AuthenticationCompare WEP, WPA, WPA2 and WPA3 encryption, TKIP and AES, personal and enterprise modes, and the RADIUS, TACACS+ and Kerberos…Diagram4 min
- 6Malware Types and ProtectionIdentify viruses, worms, trojans, ransomware, spyware, rootkits and other malware, and choose the tools and habits that detect…4 min
- 7Social Engineering, Threats and VulnerabilitiesCompare phishing, vishing, smishing, tailgating and impersonation, then recognise DoS, on path and injection attacks, zero days…4 min
- 8SOHO Malware Removal ProcedureFollow the ten step best practice for SOHO malware removal: verify, quarantine, disable System Restore, remediate, reinstall if…Diagram5 min
- 9Workstation Security and HardeningHarden a workstation with strong passwords, BIOS and UEFI protection, account limits, screen locks, disabling AutoRun, patching…4 min
- 10Securing Mobile DevicesSecure phones and tablets with screen locks, biometrics, remote wipe, encryption, updates, authenticator apps, MDM and BYOD…4 min
- 11Data Destruction and DisposalCompare physical destruction, degaussing, wiping and formatting, and when a certificate of destruction is needed when retiring…4 min
- 12SOHO Wireless and Wired SecuritySecure a small office router: change default logins, use WPA3 or WPA2, update firmware, filter MAC addresses, forward ports and…Diagram4 min
- 13Browser Security SettingsConfigure browser security: trusted downloads, extensions, password managers, HTTPS and certificates, pop up blockers, cache…4 min
About this chapter
What this chapter covers
Security is a core part of the A+ Core 2 exam, because a support technician is often the first person to deal with an infected computer, a lost phone or a weak router. This chapter covers the controls that prevent problems and the steps that fix them.
It starts with the building and the user account, then moves to Windows settings, wireless and network protection. It also covers malware and social engineering, how to clean an infected small office computer, how to retire old data safely and how to set up a browser securely.
How the topics fit together
The pages move from prevention to detection to response.
- Controls include locks, badges, accounts, permissions, MFA and Active Directory.
- Protection covers Defender, the firewall, encryption, Wi-Fi security, mobile settings and router settings.
- Threats cover malware types and social engineering attacks.
- Response covers the malware removal steps, hardening, data destruction and browser safety.
Many questions give a situation and ask for the best control. Decide whether the need is to prevent, detect or recover, and then match the tool.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and example commands.
- What to remember for the exam: the facts to memorise.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Pay special attention to ordered lists, such as the ten malware removal steps, and to comparison tables, such as the wireless protocols and the NTFS move rules.
Ready for more practice?
The full CompTIA A+ 220-1202 question bank has 835 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by CompTIA. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.