Câu 43: CS0-003: CompTIA CySA+ (CS0-003)

A security analyst needs to mitigate a known, exploited vulnerability related to an attack vector that embeds software through the USB interface. Which of the following should the analyst do first?

1. A. Conduct security awareness training on the risks of using unknown and unencrypted USBs.
2. B. Write a removable media policy that explains that USBs cannot be connected to a company asset.
3. C. Check configurations to determine whether USB ports are enabled on company assets. — đáp án hiện tại
4. D. Review logs to see whether this exploitable vulnerability has already impacted the company.