220-1002 · Question #309
A technician wants to secure a company's laptops by preventing the USB flash drive from being used. Which of the following would be the BEST and FASTEST way for the technician to accomplish this goal?
The correct answer is B. Disable physical ports. Disabling USB ports directly in the BIOS/UEFI firmware (or through Group Policy/Device Manager) is the best and fastest method to block USB flash drives across affected laptops. It is a centralized, immediate, and software-level control that does not require hardware…
Question
A technician wants to secure a company's laptops by preventing the USB flash drive from being used. Which of the following would be the BEST and FASTEST way for the technician to accomplish this goal?
Options
- AUse intrusion prevention systems
- BDisable physical ports
- CUninstall USB drivers
- DInstall HIDS
How the community answered
(54 responses)- A7% (4)
- B74% (40)
- C4% (2)
- D15% (8)
Explanation
Disabling USB ports directly in the BIOS/UEFI firmware (or through Group Policy/Device Manager) is the best and fastest method to block USB flash drives across affected laptops. It is a centralized, immediate, and software-level control that does not require hardware modification. Intrusion Prevention Systems (IPS) are network security tools that monitor and block malicious traffic - they do not control physical ports. Uninstalling USB drivers would also disable USB keyboards, mice, and other legitimate peripherals, causing operational disruption - not a targeted solution. HIDS (Host-based Intrusion Detection Systems) monitor for suspicious activity after the fact but cannot proactively block USB devices.
Topics
Community Discussion
No community discussion yet for this question.