CSCU Physical Security and Device Protection 2

Question 1

What should you do with sensitive documents you no longer need?

Accepted Answer

Shred them with a cross-cut shredder before disposal

Answer

Cross-cut shredding destroys documents so they cannot be reconstructed and exploited through dumpster diving.

Question 2

What is 'dumpster diving' in the context of information security?

Accepted Answer

Searching through discarded materials to find sensitive information

Answer

Dumpster diving involves physically searching through trash or recycling bins to find discarded documents, devices, or media containing sensitive information.

Question 3

Why is full-disk encryption important for laptops and portable devices?

Accepted Answer

It ensures data remains unreadable if the device is lost or stolen

Answer

Full-disk encryption renders all stored data unreadable without the correct decryption key, protecting it even if the physical device falls into the wrong hands.

Question 4

What is the CSCU-recommended approach when using a USB drive found in a parking lot?

Accepted Answer

Turn it in to IT security or discard it — never plug it into your computer

Answer

Found USB drives are a classic social engineering attack vector; even a sandboxed system can be at risk, so the safest action is to hand it to IT or discard it.

Question 5

Which of the following is a best practice for securing a home workspace?

Accepted Answer

Position your screen so visitors cannot easily view it and lock it when unattended

Answer

Physically positioning your screen to limit visibility and locking it when stepping away protects sensitive data from household visitors.

CSCU - Certified Secure Computer User Practice Test

CSCU - Certified Secure Computer User Practice Test

CSCU Physical Security and Device Protection 2