220-802 · Question #354
A technician must secure company documents from accidental disclosure. Which of the following should be implemented? (Select TWO).
The correct answer is A. User training C. Paper shredding. Preventing accidental document disclosure requires both educating users to handle information responsibly and physically destroying hard-copy documents. User training and paper shredding together address both the human and physical dimensions of data leakage.
Question
A technician must secure company documents from accidental disclosure. Which of the following should be implemented? (Select TWO).
Options
- AUser training
- BAnti-malware
- CPaper shredding
- DTime of day restrictions
- EEmployee badges
- FMantraps
How the community answered
(19 responses)- A79% (15)
- B5% (1)
- D11% (2)
- F5% (1)
Why each option
Preventing accidental document disclosure requires both educating users to handle information responsibly and physically destroying hard-copy documents. User training and paper shredding together address both the human and physical dimensions of data leakage.
User training is a preventive administrative control that teaches employees how to identify, handle, and protect sensitive documents, directly reducing the likelihood of accidental disclosure through careless behavior.
Anti-malware protects against malicious software threats and does not address accidental human disclosure of documents.
Paper shredding is a physical destruction method that ensures printed or written sensitive documents cannot be retrieved or read if they are discarded, eliminating the risk of physical document exposure.
Time of day restrictions limit when users can authenticate to systems and do not control how documents are handled or shared once a user is logged in.
Employee badges enforce physical building access control and do not prevent a logged-in user from accidentally sharing or mishandling documents.
Mantraps are physical entry controls that restrict who can enter a facility and do not prevent accidental document disclosure by authorized employees already inside.
Concept tested: Preventing accidental data disclosure - training and physical controls
Source: https://www.cisa.gov/topics/physical-security
Topics
Community Discussion
No community discussion yet for this question.