Which of the following procedures would MOST effectively detect the loading of illegal software packages onto
a network?

A.
The use of diskless workstations

B.
Periodic checking of hard drives

C.
The use of current antivirus software

D.
Policies that result in instant dismissal if violated

Explanation:
The periodic checking of hard drives would be the most effective method of identifying illegal software
packages loaded to the network. Antivirus software will not necessarily identify illegal software, unless the
software contains a virus. Disk less workstations act as a preventive control and are not effective, since users
could still download software from other than disk less workstations. Policies lay out the rules about loading the
software, but will not detect the actual occurrence.