Free 220-1102 sample questions

Correct answer: Using data sanitization software

Data sanitization software provides the most secure method for destroying data on storage devices before disposal or repurposing. This software uses DoD-approved algorithms to overwrite all data sectors multiple times with random patterns, making data recovery virtually impossible. Unlike basic formatting or OS reinstallation, sanitization software specifically targets all areas of the drive including slack space, temporary files, and deleted file remnants. For SSDs, proper sanitization software also addresses wear leveling and over-provisioning areas. This method ensures compliance with data protection regulations and prevents sensitive information from being recovered by unauthorized parties.

Correct answer: Remove the suspicious application.

Removing the suspicious application should be the first step when dealing with mobile malware symptoms. Even though the app was downloaded from an official store, malicious applications can still slip through screening processes or become compromised after publication. The symptoms described (high data usage and security warnings) are consistent with malware behavior such as data exfiltration or unauthorized network communications. Uninstalling the app is the least invasive first step that can immediately stop the malicious activity while preserving user data and device configuration. If symptoms persist after removal, additional steps like anti-malware scans or factory reset may be necessary.

Correct answer: End user acceptance

End user acceptance is the logical next step after change approval in the change management process. Once the change advisory board or steering committee approves a change request, the implementation team must validate that affected end users accept the proposed changes and understand the impact on their daily operations. This step ensures stakeholder buy-in before proceeding with implementation and helps identify any overlooked concerns or requirements. End user acceptance also includes confirming that appropriate training and communication plans are in place to support the change rollout.

Correct answer: Isolate the infected system.

Isolating the infected system is the first and most critical step in ransomware incident response. This involves immediately disconnecting the affected computer from the network to prevent the ransomware from spreading to other systems, accessing network shares, or communicating with command and control servers. Quarantine can be accomplished by unplugging network cables, disabling wireless adapters, or using network isolation tools. This containment step is essential before any remediation attempts, as it limits the scope of the infection and protects other valuable data and systems on the network. Only after proper isolation should removal and recovery procedures begin.

Correct answer: Remote wipe capability

Remote wipe capability is the most effective security measure for protecting corporate data when mobile devices are lost or stolen. This feature allows IT administrators to remotely erase all data from a device through mobile device management (MDM) solutions, ensuring that sensitive corporate information cannot be accessed by unauthorized individuals. Remote wipe can be triggered immediately upon reporting a lost or stolen device, and it completely removes all data, applications, and settings. This is particularly important for sales representatives who may store customer information, financial data, and proprietary business information on their devices.