RANGER GAMEZ

CompTIA A+ Core 2 (220-1202) · chapter 16 of 17

Ops: Policy, privacy and AI

In this chapter Objectives 4.6, 4.10

  1. Incident response
  2. Licensing, agreements and regulated data
  3. Artificial intelligence basics
  4. Practice questions
  5. Chapter recap

Objective 4.6

Incident response

When you find prohibited content

If you come across illegal content or a policy violation while working: stop, don't keep browsing, don't delete anything, and don't confront the user. Follow the incident response process: report through proper channels, informing management/law enforcement as necessary (management and security decide on law enforcement), and protect the evidence.

Exam tip First step on the exam: identify it and report it through proper channels. Not 'delete it' and not 'warn the user'.

Preserving evidence

Evidence is only useful if it's trustworthy:

  • Chain of custody: a log of everyone who handled the evidence, when, and why, with signatures; no gaps
  • Copy of drive (data integrity and preservation): work on a forensic copy made with a write blocker; hashes prove the copy matches the original
  • Incident documentation: what you saw, when, actions taken, who you told
  • Order of volatility: collect the most short-lived data first: CPU cache and registers, then RAM, then swap/temp files, then disk, then remote logs and backups

Exam tip Unplugging a PC destroys RAM contents. If memory evidence matters, capture it before power-off.

Objective 4.6

Licensing, agreements and regulated data

Licensing, DRM and EULA

Software is licensed, not owned.

  • Valid licenses: every install must be covered; audits check counts
  • Perpetual license agreement: pay once, use that version forever (updates may cost extra)
  • Personal-use license: home use only; not allowed in business
  • Corporate-use license: business use, often per seat or per device, with volume keys
  • Open-source license: source code available; free to use under terms such as attribution or sharing changes
  • EULA (end-user license agreement): the terms the user accepts at install
  • DRM (digital rights management): technology that enforces the license (activation, copy limits)

Exam tip 'Free for personal use' software on company PCs = license violation.

NDA and MNDA

A non-disclosure agreement (NDA) legally binds one party to keep information confidential (a contractor learning our pricing). A mutual NDA (MNDA) binds both sides, used when two companies share secrets with each other, such as during a partnership.

Regulated data

Some data has legal rules attached:

  • Credit card payment information: protected by PCI DSS rules; never store full card numbers in spreadsheets
  • Personal government-issued information: Social Security, passport and driver's license numbers
  • PII (personally identifiable information): names, addresses, birthdates, emails that identify a person
  • Healthcare data: medical records, protected by laws such as HIPAA in the US
  • Data retention requirements: laws and policy set how long records are kept and when they must be destroyed

AUP and compliance

The acceptable use policy (AUP) says what users may and may not do with company systems: no personal crypto mining, no illegal content, limited personal use. Regulatory and business compliance requirements turn laws and contracts into controls. Splash screens (logon banners) remind users of the AUP and that systems are monitored, before they sign in.

Exam tip A logon banner saying 'authorized use only, activity is monitored' is a splash screen for compliance.

Check yourself 1A sales manager keeps a spreadsheet of customers' 16-digit account numbers, expiry dates and CVV codes for 'quick reorders'. Which type of regulated data is this?

  1. Healthcare data
  2. Personal government-issued information
  3. Open-source licensed data
  4. Credit card payment information
Show the answer

Answer: D. Credit card payment information

Card numbers and expiry dates are payment card data, governed by PCI DSS. They must not be kept in plain spreadsheets.

Objective 4.10

Artificial intelligence basics

Application integration

AI is now built into everyday tools: email and meeting summaries, writing assistants in office apps, help desk chatbots that suggest answers, code helpers and AI search in ticketing systems. Integrating AI means it may see whatever data the app can see, so permissions and data handling matter as much as features.

Policy

Companies need an AI policy that covers appropriate use: which tools are approved, for which tasks, and what data may be entered. It also covers plagiarism: AI output may copy others' work or can't be passed off as fully original where that matters, so users must review, cite and take responsibility for what they publish.

Exam tip The AUP should name the approved AI tools. Unapproved public chatbots for company data = policy violation.

Limitations

AI can be confidently wrong:

  • Hallucinations: invented facts, commands or citations that sound real
  • Accuracy: answers can be outdated or subtly wrong; verify before acting (especially commands and scripts)
  • Bias: output reflects bias in training data, which matters for hiring, lending or customer decisions

Exam tip Never paste an AI-suggested command into a production server without understanding and testing it.

Private vs. public AI

Public AI: consumer tools on the internet; what you type may be stored or used to train models, outside your control. Private AI: company-hosted models, or enterprise contracts that keep data inside your tenant. Compare on data security (where it's stored, who can access it), data source (what it was trained on and what it can reach) and data privacy (whether PII or regulated data is exposed).

Exam tip Customer PII or regulated data belongs only in approved private AI tools, if anywhere.

Check yourself 2A marketer pastes a customer list with names and home addresses into a free public chatbot to write emails. What is the main concern?

  1. Hallucinations in the generated email wording
  2. Bias in the chatbot's training data
  3. Data privacy: PII leaves company control
  4. Plagiarism of the marketing copy
Show the answer

Answer: C. Data privacy: PII leaves company control

Public AI tools may store or reuse what's entered, so pasting PII exposes regulated data outside the company. That's a privacy and policy problem first.

Practice questions

Answer in your head, then open the answer. Ranger's Help Desk has 444 questions like these for A+ Core 2, with mock exams.

Question 1While repairing a laptop, a technician discovers what appears to be illegal content in a user's folder. What should the technician do FIRST?

  1. Delete the files and finish the repair
  2. Copy the files to a USB drive to save as evidence
  3. Ask the user to explain the files
  4. Leave it as found and report it to management
Show the answer

Answer: D. Leave it as found and report it to management

The technician should not alter or explore the evidence and should follow policy by informing management, who will involve law enforcement as necessary.

Question 2An investigator reviews the chain of custody form in the exhibit for a laptop seized during an incident. What is the problem with this record?

  1. There is a gap with no record of who held the laptop
  2. The evidence should not have been placed in a locker
  3. The analyst should not have made a copy of the drive
  4. The laptop should have been powered off before collection
Show the answer

Answer: A. There is a gap with no record of who held the laptop

The record jumps from Oct 3 to Oct 7 with a new handler and no entry showing how it got there. Any gap in custody can make evidence inadmissible.

Question 3A responder arrives at a running workstation suspected of being compromised by memory-resident malware. Following the order of volatility, which data should be collected FIRST?

  1. A full image of the hard drive
  2. The firewall logs on the remote server
  3. Archived backup tapes from last month
  4. The contents of RAM
Show the answer

Answer: D. The contents of RAM

Order of volatility says to collect the data that disappears fastest first. RAM is lost at power-off, so it comes before disk images, remote logs, and archives.

Question 4After containing a malware outbreak, a technician writes up what happened, when it was discovered, which systems were affected, and what was done. What is this called?

  1. An acceptable use policy
  2. Incident documentation
  3. A change request
  4. A standard operating procedure
Show the answer

Answer: B. Incident documentation

Incident documentation records the details of a security event and the response. It supports lessons learned and any legal action.

Question 5A designer installs a font-management tool labeled 'free for personal use' on her work PC. What is the problem?

  1. Fonts are covered by the company's AUP, not licenses
  2. The tool needs an open-source license to be legal
  3. That license does not allow commercial use
  4. Free software cannot be installed on a domain PC
Show the answer

Answer: C. That license does not allow commercial use

Personal-use licenses usually forbid commercial or corporate use. The company needs a corporate license to use the tool legally.

Practice it in Ranger's Help DeskThe same lessons as a story, with drills, hands-on labs and mock exams. Free, in your browser.
Play free

CompTIA, A+, Network+, Security+ and Linux+ are trademarks of CompTIA, Inc. Ranger Gamez is not affiliated with or endorsed by CompTIA. The practice questions are written to the published exam objectives; they are not real exam questions.