To protect against unauthorized disclosure of confidential information on portable computing devices, which practice is correct?

To protect against unauthorized disclosure of confidential information on portable computing devices, which practice is correct?

• A. encryption is not used
• B. the devices are regularly connected to the organization's computer network
• C. the devices are regularly scanned for viruses and spyware programs
• D. all of the above

Answer: (C)

Protecting confidential data on portable devices hinges on preventing malware from acting as a channel for leakage. Regularly scanning for viruses and spyware directly reduces the chance that malicious software will exfiltrate or disclose information by detecting and removing threats before they can do harm. Encryption is essential in practice to protect data if a device is lost or stolen, so the statement that encryption is not used would weaken protection. Simply connecting devices to the network can increase exposure to threats if not tightly controlled, and isn’t a standalone safeguard. Therefore, scanning for viruses and spyware is the best choice among the options.

Protecting confidential data on portable devices hinges on preventing malware from acting as a channel for leakage. Regularly scanning for viruses and spyware directly reduces the chance that malicious software will exfiltrate or disclose information by detecting and removing threats before they can do harm. Encryption is essential in practice to protect data if a device is lost or stolen, so the statement that encryption is not used would weaken protection. Simply connecting devices to the network can increase exposure to threats if not tightly controlled, and isn’t a standalone safeguard. Therefore, scanning for viruses and spyware is the best choice among the options.