Exam objective

Core 2 2.0: Windows Security Configuration

A+ Topic

Windows Security Configuration for A+

# Topic boundaries and scope

Start first lesson

7 lessons in this topic

1

Defender Antivirus and Firewall Settings

Configure basic Windows protection settings using Defender Antivirus and Firewall behavior at a technician support level.

2

Windows Users, Groups, and Account Types

Distinguish Windows account types and understand the practical differences between local and Microsoft accounts.

3

Windows Sign-in and Passwordless Options

Recognize Windows login methods and passwordless sign-in options in common access and support scenarios.

4

NTFS, Share Permissions, Attributes, and Inheritance

Apply Windows file and shared-resource access logic using NTFS permissions, share permissions, attributes, and inheritance.

5

Privilege Elevation and User Account Control

Use elevation correctly in Windows and explain how UAC shapes normal privileged behavior.

6

BitLocker, BitLocker-To-Go, and EFS

Distinguish the main Windows encryption options used for local drives, removable media, and file-level protection.

7

Basic Active Directory Security Tasks

Recognize the small set of Windows-domain tasks explicitly in scope for A+ Core 2.

Common mistakes to avoid

1

Tendency to assume Defender is off when a third-party antivirus was previously installed; Windows may disable Defender automatically.

2

Mixing up domain accounts with Microsoft accounts; domain accounts are managed by Active Directory and are covered under the AD micro-objective. Also confusing Microsoft account privileges with automatic admin rights.

3

Believing PIN or Hello biometrics replace passwords everywhere; they are device-bound and do not always provide access to remote services without proper account linkage or SSO.

4

Many learners assume permissions add together rather than intersect; they also confuse attributes (hidden/read-only) with permission bits. Deny entries take precedence over Allow entries for the same principal.