CCSP · Question #215
A process for __________ can aid in protecting against data disclosure due to lost devices.
The correct answer is B. Credential revocation. Credential revocation is a crucial process to protect against data disclosure from lost devices by disabling access tokens or credentials associated with the compromised device.
Question
A process for __________ can aid in protecting against data disclosure due to lost devices.
Options
- AUser punishment
- BCredential revocation
- CLaw enforcement notification
- DDevice tracking
How the community answered
(65 responses)- A2% (1)
- B89% (58)
- C3% (2)
- D6% (4)
Why each option
Credential revocation is a crucial process to protect against data disclosure from lost devices by disabling access tokens or credentials associated with the compromised device.
User punishment is a disciplinary action and does not prevent data disclosure from a lost device.
When a device is lost, credential revocation immediately nullifies any active authentication sessions, API keys, or access tokens associated with that device or user, preventing unauthorized access to cloud services or other connected systems even if the device's local security is bypassed. This directly mitigates the risk of data disclosure that could occur by an attacker using the device's stored or active credentials.
Law enforcement notification is a post-incident response and does not prevent data disclosure itself.
Device tracking helps locate a lost device but does not inherently protect the data accessible through its credentials if the device is compromised.
Concept tested: Mitigating data disclosure from lost devices
Source: https://learn.microsoft.com/en-us/azure/active-directory/develop/revoking-user-access
Topics
Community Discussion
No community discussion yet for this question.