nerdexam
Isaca

CRISC · Question #475

Which of the following BEST mitigates the risk associated with inadvertent data leakage by users who work remotely?

The correct answer is D. Providing encrypted access to organizational assets. Encrypted access protects data in transit and at rest when remote users interact with organizational assets, significantly reducing the risk of inadvertent leakage.

Submitted by parkjh· Apr 18, 2026Risk Response and Reporting

Question

Which of the following BEST mitigates the risk associated with inadvertent data leakage by users who work remotely?

Options

  • AConducting training on the protection of organizational assets
  • BConfiguring devices to use virtual IP addresses
  • CEnsuring patching for end-user devices
  • DProviding encrypted access to organizational assets

How the community answered

(31 responses)
  • A
    19% (6)
  • B
    6% (2)
  • C
    13% (4)
  • D
    61% (19)

Why each option

Encrypted access protects data in transit and at rest when remote users interact with organizational assets, significantly reducing the risk of inadvertent leakage.

AConducting training on the protection of organizational assets

Training is a good awareness control but doesn't directly prevent technical leakage if users make mistakes or systems are configured insecurely.

BConfiguring devices to use virtual IP addresses

Using virtual IP addresses might obscure the actual device IP but does not directly encrypt or protect the data being accessed or processed.

CEnsuring patching for end-user devices

Patching is crucial for device security but primarily addresses vulnerabilities that could lead to malicious exploits, not necessarily inadvertent data leakage by legitimate users.

DProviding encrypted access to organizational assetsCorrect

Providing encrypted access, such as through VPNs or secure protocols, ensures that data transmitted between remote users and organizational assets is protected from interception and unauthorized access, thereby mitigating inadvertent data leakage.

Concept tested: Data leakage prevention - encryption

Source: https://learn.microsoft.com/en-us/microsoft-365/compliance/prevent-data-loss-data-loss-prevention?view=o365-worldwide

Topics

#Remote access security#Data protection#Encryption#Risk mitigation

Community Discussion

No community discussion yet for this question.

Full CRISC Practice