A user is concerned about malware automatically running from a USB flash drive when it is connected to a computer. Which of the following security best practices would BEST mitigate this specific risk?
Disabling AutoRun is a security best practice that prevents the operating system from automatically executing commands found in the autorun.inf file on removable media. This directly mitigates the risk of malware launching automatically when a device like a USB flash drive is inserted. While other options are valid security measures, they do not address the specific threat of automatic execution from removable media. A screen lock protects against unauthorized physical access, full-disk encryption protects data at rest, and a BIOS/UEFI password secures the pre-boot environment.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the autorun.inf file?
Open an interactive chat with Bash
How does AutoRun relate to malware?
Open an interactive chat with Bash
What are some methods to scan removable media for threats?