Question

A security administrator for a defense contracting company wants to disable external devices. The administrator pushes out a group policy setting to disable such devices but worries that attackers might elevate privileges and reenable them. What other setting will help the administrator accomplish the objective?

a. Selective suspend
b. Device encryption
c. BIOS password
d. BitLocker

Answer 1

The other setting that will help the administrator disable external devices is BIOS password. BitLocker provides encryption for data security, while selective suspend is a power-saving feature for USB devices.

Step-by-step explanation:

The other setting that will help the administrator accomplish the objective of disabling external devices is BIOS password. A BIOS password is a security feature that prevents unauthorized access to the computer's BIOS settings. By setting a strong BIOS password, the administrator can prevent attackers from changing any system settings, including enabling external devices.

BitLocker, on the other hand, is a disk encryption feature that can be used to secure the data on the hard drives of the company's computers. While it provides an additional layer of security, it does not directly disable external devices.

Selective suspend is a power-saving feature of USB devices that allows the operating system to suspend the device when it's not in use, but it does not disable the device completely.