To prevent external access, the technician should avoid exposing the surveillance system's port to the public internet. Port mapping (also known as port forwarding) is the method used to control which internal devices and ports are accessible from the outside. By not configuring port forwarding for the device, external login attempts are effectively blocked.
B). Subnetting organizes IP addresses but doesn ' t directly restrict access.
C). A static IP ensures consistent addressing but does not secure access.
D). Content filtering is used to restrict web content, not to block access to a web interface.
Reference:
CompTIA A+ 220-1102 Objective 2.2: Compare and contrast security measures and tools.
Study Guide Section: SOHO router security - port forwarding and blocking external access

When defaults are too permissive across multiple Windows workstations, the most efficient and scalable fix is to enforce a standardized security baseline using Group Policy. The All-in-One guide explains that Windows provides extensive "security features" such as requiring complex passwords, limiting logon times, and controlling whether users can install applications-"and the list goes on to thousands of security features." It states that "To configure these features, you use group policies," and that you configure them using the Group Policy Editor (gpedit.msc).
This directly matches the scenario: repeated unauthorized attempts suggest the need to tighten multiple security settings consistently. While enabling account lockout policies (D) is one good control, the question is broader-"default security settings may be too permissive"-so the best action is to implement the overall appropriate group policy that can include lockout, password complexity, auditing, and other controls together.
Updates and password resets are useful, but they don't systematically correct permissive baseline settings across systems. Therefore, implementing an appropriate group policy is the best answer.

Outdated images and website data often result from cached files in the browser. The Internet Options panel in Windows (specifically under the General tab) allows users to clear browsing history, including cached images and files, which forces the browser to load the most current versions of web content.
A). Administrative Tools is used for advanced system management, not browser settings.
B). Windows Defender Firewall controls network traffic and security rules, not caching.
D). Ease of Access provides accessibility features for users with disabilities - unrelated to web browsing issues.
Reference:
CompTIA A+ 220-1102 Objective 3.3: Troubleshoot common software and application issues.
Study Guide Section: Internet Options and browser cache clearing for display issues

Mobile Device Management (MDM) allows an organization to enforce security policies, such as denying network access to jailbroken/rooted devices.
From the All-in-One Exam Guide by Travis Everett and Andrew Hutz:
"MDM software allows administrators to monitor, manage, and secure mobile devices connected to enterprise networks. One key feature is the detection and denial of access for rooted or jailbroken devices".
Quentin Docter also confirms:
"An MDM solution can check if a device has been rooted and prevent it from accessing the network, ensuring compliance with corporate security standards".

A bollard is a sturdy physical barrier-often a steel or concrete post-designed to prevent vehicles or unauthorized individuals from ramming into or entering secure areas of a building. It provides physical security and is commonly used outside entrances to prevent forced entry.
A). PIV (Personal Identity Verification) cards are used for identity access control, not physical blocking.
B). Motion lighting may deter activity but doesn't physically prevent entry.
C). Surveillance records activity but cannot stop a forced entry.
Reference:
CompTIA A+ 220-1102 Objective 2.4: Compare and contrast physical security measures.
Study Guide Section: Physical security devices - barriers, bollards, and deterrents