nerdexam
CompTIA

220-1002 · Question #723

A user needs to transfer some information from a work computer to a server. The user plugs a personal USB into the computer but is denied access to save information on the storage medium due to the…

The correct answer is D. data loss prevention. Data Loss Prevention (DLP) policy blocked the personal USB drive to prevent sensitive data from leaving the organization's controlled environment.

Hardware and network troubleshooting

Question

A user needs to transfer some information from a work computer to a server. The user plugs a personal USB into the computer but is denied access to save information on the storage medium due to the security policy. This is an example of:

Options

  • Aport security.
  • Ban access control list
  • Ca Trojan horse,
  • Ddata loss prevention

How the community answered

(25 responses)
  • A
    4% (1)
  • C
    8% (2)
  • D
    88% (22)

Why each option

Data Loss Prevention (DLP) policy blocked the personal USB drive to prevent sensitive data from leaving the organization's controlled environment.

Aport security.

Port security is a network switch feature that restricts which MAC addresses can communicate on a physical network port and does not apply to USB storage device access on an endpoint.

Ban access control list

An access control list (ACL) governs permissions to network resources or firewall traffic rules and is not the mechanism used to block USB storage devices on an endpoint.

Ca Trojan horse,

A Trojan horse is a type of malware disguised as legitimate software and is a threat, not a security control or policy enforcement mechanism.

Ddata loss preventionCorrect

DLP solutions enforce organizational policies that restrict how data can be copied, moved, or transmitted - including blocking writes to removable storage devices like personal USB drives. The scenario describes exactly this use case: a security policy automatically denying an action that could result in data leaving the corporate environment, which is the core function of DLP. The block is policy-driven and content/context-aware, not simply a network or port-level control.

Concept tested: Data Loss Prevention policy blocking removable USB storage

Source: https://learn.microsoft.com/en-us/purview/dlp-learn-about-dlp

Topics

#data loss prevention#DLP#USB security#removable media policy

Community Discussion

No community discussion yet for this question.

Full 220-1002 Practice