Physical Security and Device Protection Flashcards

What should you do with sensitive documents you no longer need?

Answer: Shred them with a cross-cut shredder before disposal

Cross-cut shredding destroys documents so they cannot be reconstructed and exploited through dumpster diving.

What is 'dumpster diving' in the context of information security?

Answer: Searching through discarded materials to find sensitive information

Dumpster diving involves physically searching through trash or recycling bins to find discarded documents, devices, or media containing sensitive information.

Why is full-disk encryption important for laptops and portable devices?

Answer: It ensures data remains unreadable if the device is lost or stolen

Full-disk encryption renders all stored data unreadable without the correct decryption key, protecting it even if the physical device falls into the wrong hands.

What is the CSCU-recommended approach when using a USB drive found in a parking lot?

Answer: Turn it in to IT security or discard it — never plug it into your computer

Found USB drives are a classic social engineering attack vector; even a sandboxed system can be at risk, so the safest action is to hand it to IT or discard it.

Which of the following is a best practice for securing a home workspace?

Answer: Position your screen so visitors cannot easily view it and lock it when unattended

Physically positioning your screen to limit visibility and locking it when stepping away protects sensitive data from household visitors.

What does 'device hardening' mean in the context of physical security?

Answer: Configuring a device to reduce its attack surface by disabling unused features and ports

Device hardening involves disabling unused ports, services, and features to minimize the ways an attacker could gain access to a system.