Company A is trying to implement controls to reduce costs and time spent on litigation. To accomplish this, Company A has established several goals: - Prevent data breaches from lost/stolen assets…

Question

Options

• AImplement separation of duties; enable full encryption on USB devices and cell phones, allow cell
• BEliminate VPN access from remote devices. Restrict junior administrators to read-only shell access
• CCreate a change control process with stakeholder review board, implement separation of duties and
• DImplement outgoing mail sanitation and incoming SPAM filtering. Allow VPN for mobile devices;

• A
  70% (26)
• B
  8% (3)
• C
  5% (2)
• D
  16% (6)

Explanation

Option A addresses the most goals from the list. Separation of duties directly reduces internal fraud by ensuring no single employee can complete a sensitive transaction alone. Full encryption on USB devices and cell phones prevents data breaches when those assets are lost or stolen. The implied remainder of Option A (the text is truncated) likely includes DLP or email controls to prevent PII exfiltration. Option B (eliminating VPN) reduces attack surface but does not address internal fraud or PII leakage. Option C (change control with stakeholder review) is governance-focused and does not directly address encryption or PII leakage. Option D (mail sanitation and SPAM filtering) only addresses email-borne threats and PII in outgoing mail but misses physical asset encryption and fraud reduction. Option A targets the highest number of the listed goals simultaneously.

No community discussion yet for this question.