Which of the following BEST supports an organization's objective of restricting the use of removable storage devices by users?

Question

Options

• AData management policy
• BUpdated anti-malware solutions
• CData loss prevention (DLP)
• DOnline monitoring

• A
  9% (4)
• B
  4% (2)
• C
  72% (33)
• D
  15% (7)

Explanation

Data Loss Prevention (DLP) is the correct answer because DLP solutions can actively enforce technical controls that block, monitor, or restrict the use of removable storage devices (USB drives, external hard drives, etc.) at the endpoint level - directly preventing unauthorized data transfer.

Why the others are wrong:

• A (Data management policy) is an administrative control - a written rule - but policies alone cannot technically enforce or restrict device usage; users can still physically plug in a drive.
• B (Anti-malware) protects against malicious software and may scan removable media, but it doesn't restrict or block the use of those devices.
• D (Online monitoring) detects and logs activity after the fact but is a detective control, not a preventive one - it doesn't stop the device from being used.

Memory tip: Think of DLP as a digital bouncer - it doesn't just watch who comes in (monitoring) or post rules on the door (policy), it physically blocks unauthorized entry. Any time an exam question asks about restricting or preventing data from leaving an endpoint, DLP is almost always the answer.

No community discussion yet for this question.