A security administrator has concerns regarding employees saving data on company provided mobile devices. Which of the following would BEST address the administrator's concerns?

Question

Options

• AInstall a mobile application that tracks read and write functions on the device.
• BCreate a company policy prohibiting the use of mobile devices for personal use.
• CEnable GPS functionality to track the location of the mobile devices.
• DConfigure the devices so that removable media use is disabled.

• A
  7% (3)
• C
  2% (1)
• D
  91% (40)

Explanation

The concern is employees saving company data from mobile devices onto external storage (USB drives, SD cards), which can lead to data loss, theft, or unauthorized disclosure. Disabling removable media ports/slots on the devices is a direct technical control that prevents data from being copied to external storage media. Tracking read/write functions (A) is reactive monitoring and does not prevent the action. A policy prohibiting personal use (B) is an administrative control that relies on compliance and has no technical enforcement. GPS tracking (C) addresses device location, not data exfiltration. Disabling removable media is the most direct and effective technical control to prevent data from leaving the device via external storage.

No community discussion yet for this question.