CompTIA Security Plus Mock Test Q277

An employee recently lost a USB drive containing confidential customer data. Which of the following controls could be utilized to minimize the risk involved with the use of USB drives?

A. DLP
B. Asset tracking
C. HSM
D. Access control


Correct Answer: A
Section: Compliance and Operational Security

Explanation:
Data loss prevention (DLP) systems monitor the contents of systems (workstations, servers, and networks) to make sure that key content is not deleted or removed. They also monitor who is using the data (looking for unauthorized access) and transmitting the data.

Incorrect Answers:
B: Asset tracking can be as simple as a serial number etched in the device or as complex as a GPS locator. Related to this is inventory control. A complete and accurate list of all devices is an integral part of mobile device management. However in this case the USB drive is already lost.
C: HSM is a backup type – it provides continuous online backup using optical or tape jukeboxes.
D: Access Control refers to who has access to resources and clearly users should be granted access if they require it to perform their duties.

References:
Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis, 2014, pp. 10, 419, 437