An employee recently lost a USB drive containing confidential customer data. Which of the following
controls could be utilized to minimize the risk involved with the use of USB drives?
A.
DLP
B.
Asset tracking
C.
HSM
D.
Access control
Explanation:
Data loss prevention (DLP) systems monitor the contents of systems (workstations, servers, and
networks) to make sure that key content is not deleted or removed. They also monitor who is using the
data (looking for unauthorized access) and transmitting the data.
Incorrect Answers:
B: Asset tracking can be as simple as a serial number etched in the device or as complex as a GPS locator.
Related to this is inventory control. A complete and accurate list of all devices is an integral part of mobile
device management. However in this case the USB drive is already lost.
C: HSM is a backup type – it provides continuous online backup using optical or tape jukeboxes.
D: Access Control refers to who has access to resources and clearly users should be granted access if they
require it to perform their duties.Dulaney, Emmett and Chuck Eastton, CompTIA Security+ Study Guide, 6th Edition, Sybex, Indianapolis,
2014, pp. 10, 419, 437