nerdexam
(ISC)2

HCISPP · Question #16

Which of the following actions will reduce risk to a laptop before traveling to a high risk area?

The correct answer is D. Change access codes. Changing access codes (D) before traveling ensures that any previously known or potentially compromised credentials cannot be used against the device while in a high-risk environment, directly reducing unauthorized access risk. Why the distractors are wrong: A (Examine for…

Risk Management and Risk Assessment

Question

Which of the following actions will reduce risk to a laptop before traveling to a high risk area?

Options

  • AExamine the device for physical tampering
  • BImplement more stringent baseline configurations
  • CPurge or re-image the hard disk drive
  • DChange access codes

How the community answered

(41 responses)
  • A
    15% (6)
  • B
    7% (3)
  • C
    2% (1)
  • D
    76% (31)

Explanation

Changing access codes (D) before traveling ensures that any previously known or potentially compromised credentials cannot be used against the device while in a high-risk environment, directly reducing unauthorized access risk.

Why the distractors are wrong:

  • A (Examine for physical tampering) is a post-travel action - you inspect the device after returning to check if it was compromised, not before departure.
  • B (Implement more stringent baseline configurations) is an ongoing organizational hardening measure, not a targeted pre-travel action.
  • C (Purge or re-image the hard drive) is actually performed either before or after travel as a data sanitization step, making it ambiguous in timing - and notably, many security frameworks actually consider C the stronger pre-travel control since it eliminates sensitive data exposure entirely.

Note for exam takers: This question has some ambiguity in the wild - C (purge/re-image) is widely cited as a best-practice pre-travel action in enterprise security guidance. If your specific exam or study material marks D as correct, focus on the "access control before departure" rationale. Know both C and D as valid pre-travel considerations.

Memory tip: Think BEFORE = Change codes, AFTER = Check for tampering. The "A" in "After" matches "A (physical tampering check)."

Topics

#credential rotation#access control#mobile security#travel security

Community Discussion

No community discussion yet for this question.

Full HCISPP Practice