2.6 - Physical and mobile device security controls
CompTIA A+ Core 2 objective 2.6 covers physical security controls and how to secure mobile fleets. An access control vestibule (mantrap) forces one person through at a time to stop tailgating, and cable locks deter laptop theft in public areas. For authentication, a hardware token or key fob shows a rotating one-time code, and combining a password with an authenticator code is multifactor authentication. To manage a fleet of company tablets or phones, Mobile Device Management (MDM) lets you remotely wipe a lost device and enforce policies. Data Loss Prevention (DLP) helps stop sensitive data such as card numbers from leaving the organisation. Expect scenario questions that describe a physical or mobile risk and ask for the control that best addresses it.
One-person-at-a-time door = access control vestibule (mantrap). Rotating login code device = hardware token. Wipe/enforce policy on lost company devices = MDM. Stop card numbers leaving = DLP. Cable locks = deter theft.
Practice questions
1. Which physical control forces one person through at a time to stop tailgating?
- A perimeter concrete bollard
- An access control vestibule (mantrap) (correct answer)
- A ceiling-mounted monitoring camera
- A laptop steel cable lock
An access control vestibule (mantrap) only opens the second door after the first closes, allowing one person at a time.
2. Which is an example of multifactor authentication (MFA)?
- Two different account passwords
- A password plus an authenticator code (correct answer)
- A single longer password
- A username and a password
MFA combines different factor types — e.g., something you know (password) + something you have (TOTP code).
3. A small device on a keychain that displays a rotating code for login is a:
- A chip-based smart card
- A hardware token (key fob / OTP) (correct answer)
- A proximity access badge
- A fingerprint biometric reader
A hardware token/key fob shows a rotating one-time code (TOTP) — 'something you have' for MFA.
4. For a fleet of company tablets, which control BEST allows wiping a lost device and enforcing encryption?
- A manual tracking spreadsheet
- Mobile Device Management (MDM) (correct answer)
- A shared office network printer
- A rack-mounted KVM switch
MDM centrally enforces encryption, passcodes, app policies and remote lock/wipe across managed mobile devices.
5. What is the security benefit of physical cable locks on laptops in public areas?
- They encrypt device data
- They deter physical device theft (correct answer)
- They block network intrusions
- They authenticate the user
A Kensington-style cable lock physically secures a laptop to a desk to deter opportunistic theft.
6. Which technology helps PREVENT sensitive data (like card numbers) from leaving the organization via email/USB?
- DHCP address leasing
- Data Loss Prevention (DLP) (correct answer)
- NAT address translation
- RAID disk mirroring
DLP inspects and blocks/flags sensitive data leaving via email, USB, cloud, etc., enforcing data-handling policy.