CSCU Physical Security and Device Protection 2 — Questions and Answers
Question 1: What should you do with sensitive documents you no longer need?
- Throw them in the recycling bin
- Store them indefinitely in a cabinet
- Shred them with a cross-cut shredder before disposal (Correct answer)
- Leave them in a public lost-and-found
Correct answer: Shred them with a cross-cut shredder before disposal
Cross-cut shredding destroys documents so they cannot be reconstructed and exploited through dumpster diving.
Question 2: What is 'dumpster diving' in the context of information security?
- Searching through discarded materials to find sensitive information (Correct answer)
- An attack that floods a network with garbage data
- Accessing deleted files through file recovery software
- Scanning the dark web for leaked credentials
Correct answer: Searching through discarded materials to find sensitive information
Dumpster diving involves physically searching through trash or recycling bins to find discarded documents, devices, or media containing sensitive information.
Question 3: Why is full-disk encryption important for laptops and portable devices?
- It makes the device run faster
- It ensures data remains unreadable if the device is lost or stolen (Correct answer)
- It automatically backs up all files to the cloud
- It prevents viruses from running
Correct answer: It ensures data remains unreadable if the device is lost or stolen
Full-disk encryption renders all stored data unreadable without the correct decryption key, protecting it even if the physical device falls into the wrong hands.
Question 4: What is the CSCU-recommended approach when using a USB drive found in a parking lot?
- Plug it in on a sandboxed computer to see what's on it
- Turn it in to IT security or discard it — never plug it into your computer (Correct answer)
- Format it before using it
- Open only the document files, not executable files
Correct answer: Turn it in to IT security or discard it — never plug it into your computer
Found USB drives are a classic social engineering attack vector; even a sandboxed system can be at risk, so the safest action is to hand it to IT or discard it.
Question 5: Which of the following is a best practice for securing a home workspace?
- Leave your computer logged in to save time
- Position your screen so visitors cannot easily view it and lock it when unattended (Correct answer)
- Share your Wi-Fi password with neighbors for goodwill
- Disable the screensaver lock to avoid re-entering your password
Correct answer: Position your screen so visitors cannot easily view it and lock it when unattended
Physically positioning your screen to limit visibility and locking it when stepping away protects sensitive data from household visitors.
Question 6: What does 'device hardening' mean in the context of physical security?
- Installing a screen protector to prevent physical damage
- Configuring a device to reduce its attack surface by disabling unused features and ports (Correct answer)
- Using a ruggedized laptop case
- Soldering shut all unused USB ports
Correct answer: Configuring a device to reduce its attack surface by disabling unused features and ports
Device hardening involves disabling unused ports, services, and features to minimize the ways an attacker could gain access to a system.
CSCU Physical Security and Device Protection 2
What should you do with sensitive documents you no longer need?