CAS-005 · Question #109
A hospital provides tablets to its medical staff to enable them to more quickly access and edit patients' charts. The hospital wants to ensure that if a tablet is Identified as lost or stolen and a…
The correct answer is E. Returning on the device's solid-state media to zero. To mitigate the risk of data loss on a lost or stolen tablet quickly, the most effective strategy is to return the device's solid-state media to zero, which effectively erases all data on the device. Immediate Data Erasure: Returning the solid-state media to zero ensures that…
Question
A hospital provides tablets to its medical staff to enable them to more quickly access and edit patients' charts. The hospital wants to ensure that if a tablet is Identified as lost or stolen and a remote command is issued, the risk of data loss can be mitigated within seconds. The tablets are configured as follows to meet hospital policy:
- Full disk encryption is enabled
- "Always On" corporate VPN is enabled
- ef-use-backed keystore is enabled'ready.
- Wi-Fi 6 is configured with SAE.
- Location services is disabled.
- Application allow list is configured
Options
- ARevoking the user certificates used for VPN and Wi-Fi access
- BPerforming cryptographic obfuscation
- CUsing geolocation to find the device
- DConfiguring the application allow list to only per mil emergency calls
- EReturning on the device's solid-state media to zero
How the community answered
(43 responses)- A5% (2)
- B9% (4)
- C16% (7)
- D2% (1)
- E67% (29)
Explanation
To mitigate the risk of data loss on a lost or stolen tablet quickly, the most effective strategy is to return the device's solid-state media to zero, which effectively erases all data on the device. Immediate Data Erasure: Returning the solid-state media to zero ensures that all data is wiped instantly, mitigating the risk of data loss if the device is lost or stolen. Full Disk Encryption: Even though the tablets are already encrypted, physically erasing the data ensures that no residual data can be accessed if someone attempts to bypass encryption. Compliance and Security: This method adheres to best practices for data security and compliance, ensuring that sensitive patient data cannot be accessed by unauthorized parties.
Community Discussion
No community discussion yet for this question.