MDM hardening often includes enforcing stronger authentication on mobile devices. The phrase "unique to each user" points to something inherent to the individual-biometrics-rather than something the user knows (password/pattern) or something they have (PIV/smart card). Quentin Docter explains: "Biometric devices use physical characteristics to identify the user. This type of authentication is considered something that you are," and lists common implementations including "fingerprint... scanners." This exactly matches a fingerprint, which is unique per person and commonly enforced via device policies in MDM environments.
Docter also notes mobile devices increasingly implement biometrics for access control, specifically citing
"fingerprint access control" adopted by manufacturers. A drawn pattern and a password are knowledge factors and can be shared/observed, while a PIV card is a possession factor (something you have) and can be lost or loaned. Because the question specifies a hardening technique "unique to each user," the best match is the biometric factor: fingerprint (B).

The correct answer is D. Enabling HTTPS-Only Mode, because HTTPS ensures that all communication between the browser and websites is encrypted using TLS (Transport Layer Security). This protects sensitive information such as usernames, passwords, and payment details from interception.
According to the Quentin Docter - CompTIA A+ Complete Study Guide, HTTPS encrypts data in transit, preventing attackers from eavesdropping or modifying communications. HTTPS-only modes in modern browsers block or warn users when a site does not support secure connections.
The Travis Everett & Andrew Hutz - All-in-One Exam Guide emphasizes that HTTPS is essential for protecting authentication credentials and financial information, especially on public or untrusted networks.
Enforcing HTTPS-only connections ensures users cannot accidentally submit data over unencrypted HTTP.
The Mike Meyers / Mark Soper Lab Manual clarifies that disabling cookies or JavaScript may break website functionality but does not guarantee encryption. Pop-up blockers address nuisance behavior, not data security.
Because the objective is to encrypt browser communications and protect sensitive data, enabling HTTPS- Only Mode is the most effective and direct solution, making D the correct answer.

Smishing (SMS phishing) is a type of social engineering attack where attackers send fraudulent text messages to trick users into revealing sensitive information or downloading malware. These messages often impersonate banks, delivery services, or official institutions to lure the victim into clicking malicious links.
A). Impersonation is an in-person or voice-based tactic.
B). Vishing refers to voice phishing over phone calls.
C). Spear phishing is a targeted email-based phishing method.
Reference:
CompTIA A+ 220-1102 Objective 2.3: Compare and contrast social engineering techniques.
Study Guide Section: Smishing as a type of phishing via SMS or mobile messaging.

The first step in the IT change management process is to identify and propose the change. In this case, the technician notices a need (end-of-life network switches), so the appropriate action is to formally propose a change. This proposal would be documented and submitted for approval before any planning or implementation occurs.
According to the CompTIA A+ 220-1102 objectives under Operational Procedures (Domain 4.0), the change management process follows these typical steps:
Submit a change request (Propose the change)
Review and approval (Approve the change)
Planning and scheduling (Schedule the change)
Implementation
Documentation and review
Therefore, proposing the change is the correct first step in accordance with standard ITIL-based change management practices.
Reference:
CompTIA A+ 220-1102 Objective 4.1: Given a scenario, implement best practices associated with documentation and support systems information management.
Study Guide Section: Change Management Process

The correct answer is B. SSID configuration, because controlling SSID visibility and behavior directly affects which wireless networks devices can see and attempt to join. In shared office environments, multiple Wi-Fi networks may be present, increasing the risk of users accidentally connecting to the wrong network.
According to the Quentin Docter - CompTIA A+ Complete Study Guide, SSIDs define how wireless networks are advertised and discovered. By modifying SSID settings-such as disabling broadcast or restricting auto-join behavior-technicians can prevent devices from attempting to connect to unauthorized or unintended networks.
The Travis Everett & Andrew Hutz - All-in-One Exam Guide explains that MDM solutions often preconfigure approved wireless profiles. Adjusting SSID configuration ensures devices only recognize and connect to sanctioned networks, reducing accidental associations and security risks.
The Mike Meyers / Mark Soper Lab Manual clarifies that IP filtering, content filtering, and port forwarding are network traffic control mechanisms. They do not prevent a device from seeing or attempting to connect to nearby Wi-Fi networks.
Because the goal is to prevent accidental Wi-Fi access, not filter traffic after connection, modifying SSID configuration is the correct and most effective solution.