A security analyst needs to mitigate a known, exploited vulnerability related to an attack vector that embeds software through the USB interface. Which of the following should the analyst do first?

The correct answer is C. Check configurations to determine whether USB ports are enabled on company assets. USB ports are a common attack vector that can be used to deliver malware, steal data, or compromise systems. The first step to mitigate this vulnerability is to check the configurations of the company assets and disable or restrict the USB ports if possible. This will prevent…

Submitted by ngozi_ng· Mar 6, 2026Vulnerability Management

Question

Options

AConduct security awareness training on the risks of using unknown and unencrypted USBs.
BWrite a removable media policy that explains that USBs cannot be connected to a company
CCheck configurations to determine whether USB ports are enabled on company assets.
DReview logs to see whether this exploitable vulnerability has already impacted the company.

How the community answered

(37 responses)

A
3% (1)
B
5% (2)
C
81% (30)
D
11% (4)

Explanation

USB ports are a common attack vector that can be used to deliver malware, steal data, or compromise systems. The first step to mitigate this vulnerability is to check the configurations of the company assets and disable or restrict the USB ports if possible. This will prevent unauthorized devices from being connected and reduce the attack surface. The other options are also important, but they are not the first priority in this scenario.

Topics

#vulnerability mitigation#USB security#removable media policy#security configuration

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice