The first step the CFO should take is to verify the VPN status. When working remotely, access to internal resources such as databases, file servers, and accounting systems typically requires a secure Virtual Private Network (VPN) connection. Without an active VPN tunnel, the application cannot reach internal database servers, resulting in connection errors.

According to the Quentin Docter – CompTIA A+ Complete Study Guide, database connectivity issues during remote work are most commonly caused by missing or disconnected VPN sessions. Internal applications are often restricted to private IP ranges that are inaccessible over the public internet.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide highlights that VPNs are designed to extend the corporate network securely to remote users. If the VPN is disconnected, authentication to internal services will fail even if the application itself launches correctly.

The Mike Meyers / Mark Soper Lab Manual further explains that restarting the PC or updating the application does not resolve network-path issues. Returning to the office is unnecessary if secure remote access is functioning as designed.

Because the error specifically indicates an inability to connect to a database—and not a corrupted application—the most logical and efficient first troubleshooting step is to confirm that the VPN is connected and authenticated.

Comprehensive and Detailed Explanation From Exact Extract:

Mobile Device Management (MDM) is used to control, monitor, and enforce policies on mobile devices. It allows IT teams to restrict app installations, push approved apps, and monitor device compliance. Deploying MDM would prevent unauthorized applications, such as password crackers, from being installed on company-managed devices.

A. Group Policy is for managing Windows environments and not applicable to smartphones.

B. PAM (Privileged Access Management) controls administrative access, not app installation.

C. Anti-malware can help detect malicious apps but doesn’t prevent their installation proactively.

The correct answer is C. Browser policy, because the listed requirements apply specifically to browser-level behavior and settings, not general network traffic or system-wide configuration. Browser policies allow administrators to centrally control how browsers behave on managed systems.

The Quentin Docter – CompTIA A+ Complete Study Guide explains that modern browsers support administrative templates or policies that govern password storage, trusted sites, security levels, history handling, and URL restrictions. These policies ensure consistent behavior across all user systems without relying on manual configuration.

The Travis Everett & Andrew Hutz – All-in-One Exam Guide clarifies that while Group Policy can deploy browser policies, the object being configured is still the browser itself. The question asks what is best to configure, not how it is delivered. Browser policies directly control password management, trusted URLs, and security zones.

The Mike Meyers / Mark Soper Lab Manual further notes that web proxies and gateways filter traffic at the network level and cannot control local browser features such as password storage or history retention.

Because every listed requirement is a browser-specific control, the most accurate and targeted solution is Browser policy, making C the correct answer.

“Superficially delete” in this context means removing data without physically destroying the drive—i.e., using a logical/sanitization method rather than a destruction method. Drilling and shredding are explicit physical destruction techniques that render a drive unusable, while degaussing is a purging/destruction-style method that disrupts magnetic fields and also makes the drive unreliable for future use. The remaining choices (wiping and low-level formatting) are software-based sanitization approaches. In A+ terminology, a low-level format is contrasted with a standard format and is commonly associated with a complete overwrite/zero-fill process that clears the disk so data does not remain recoverable, while still leaving the drive functional afterward. The All-in-One guide notes that modern “low-level formatting” is often used to describe a zero-fill/overwrite operation that writes zeros to every location on the drive. It also distinguishes this from normal deletion, where data can remain until overwritten. Likewise, Docter differentiates formatting vs sanitation vs destruction, emphasizing that sanitation (including low-level formats/wipes) removes data without tossing media for “prying eyes.”

An MSDS providessafety and emergency procedures, such as what to do if a battery leaks or catches fire. It is not a technical or setup guide.

FromTravis Everett – CompTIA A+ All-in-One Exam Guide:

“An MSDS contains safety information, including handling, storage, and emergency procedures related to potentially hazardous components like UPS batteries.”

Comprehensive and Detailed Explanation From Exact Extract:

Virtualization settings are typically found within the BIOS/UEFI firmware configuration. To prevent unauthorized users from changing these settings, the technician should set a BIOS password. This ensures only administrators with the password can access or modify BIOS settings, including virtualization support.

B. The guest account is a user-level feature in Windows and doesn’t control BIOS access.

C. A screen lock prevents casual access to the desktop but doesn’t protect firmware settings.

D. AutoRun controls how media and devices behave when inserted — unrelated to BIOS security.

Removing users from the local admin group prevents them from installing unauthorized software.

From Quentin Docter – Complete Study Guide:

“Local admin privileges allow users to install unauthorized apps. Removing them from this group restricts installations and helps prevent malware.” .