nerdexam
CompTIA

SK0-005 · Question #257

A security manager is concerned that a rogue employee could boot a server from an outside USB drive. Which of the following actions can be taken to reduce this risk? (Choose two.)

The correct answer is B. Disable unneeded physical ports. C. Set a BIOS password. Disabling unneeded physical ports would prevent unauthorized devices from being connected to the server, such as an outside USB drive. Setting a BIOS password would restrict access to the boot settings and prevent unauthorized changes to the boot order. The other options would…

Security and disaster recovery

Question

A security manager is concerned that a rogue employee could boot a server from an outside USB drive. Which of the following actions can be taken to reduce this risk? (Choose two.)

Options

  • AClose unneeded ports.
  • BDisable unneeded physical ports.
  • CSet a BIOS password.
  • DInstall a SIEM.
  • EDisable unneeded services.
  • FInstall a HIDS.

How the community answered

(46 responses)
  • A
    13% (6)
  • B
    76% (35)
  • D
    2% (1)
  • E
    2% (1)
  • F
    7% (3)

Explanation

Disabling unneeded physical ports would prevent unauthorized devices from being connected to the server, such as an outside USB drive. Setting a BIOS password would restrict access to the boot settings and prevent unauthorized changes to the boot order. The other options would not address the risk of booting from an outside USB drive.

Topics

#BIOS security#Physical port management#Server hardening#USB boot prevention

Community Discussion

No community discussion yet for this question.

Full SK0-005 Practice