Which of the following controls can be used to prevent the disclosure of sensitive information stored on a mobile device's removable media in the event that the device is lost or stolen?

Question

Options

• AHashing
• BScreen locks
• CDevice password
• DEncryption

• A
  5% (1)
• B
  5% (1)
• D
  91% (20)

Explanation

Encryption is the correct control because it renders the data on the removable media (e.g., an SD card) unreadable without the correct decryption key, even if the physical media is removed from the device and accessed on another machine. If the device is lost or stolen, a thief can simply pull out the SD card and insert it into another device to read unencrypted files - encryption defeats this attack. Hashing (A) is a one-way function used to verify data integrity, not to protect confidentiality. Screen Locks (B) protect the device's interface but do nothing to protect removable media once it is physically removed. Device Password (C) similarly only protects access to the device itself - it cannot stop someone from reading a removable card directly on another device.

No community discussion yet for this question.