CRISC · Question #475
Which of the following BEST mitigates the risk associated with inadvertent data leakage by users who work remotely?
The correct answer is D. Providing encrypted access to organizational assets. Encrypted access protects data in transit and at rest when remote users interact with organizational assets, significantly reducing the risk of inadvertent leakage.
Question
Which of the following BEST mitigates the risk associated with inadvertent data leakage by users who work remotely?
Options
- AConducting training on the protection of organizational assets
- BConfiguring devices to use virtual IP addresses
- CEnsuring patching for end-user devices
- DProviding encrypted access to organizational assets
How the community answered
(31 responses)- A19% (6)
- B6% (2)
- C13% (4)
- D61% (19)
Why each option
Encrypted access protects data in transit and at rest when remote users interact with organizational assets, significantly reducing the risk of inadvertent leakage.
Training is a good awareness control but doesn't directly prevent technical leakage if users make mistakes or systems are configured insecurely.
Using virtual IP addresses might obscure the actual device IP but does not directly encrypt or protect the data being accessed or processed.
Patching is crucial for device security but primarily addresses vulnerabilities that could lead to malicious exploits, not necessarily inadvertent data leakage by legitimate users.
Providing encrypted access, such as through VPNs or secure protocols, ensures that data transmitted between remote users and organizational assets is protected from interception and unauthorized access, thereby mitigating inadvertent data leakage.
Concept tested: Data leakage prevention - encryption
Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/prevent-data-loss-data-loss-prevention?view=o365-worldwide
Topics
Community Discussion
No community discussion yet for this question.