Question 350
A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update. Which TWO complementary steps provide the best response AND its necessary supporting assessment? Select TWO.
Explanation
Correct Answers
Protect project locations and removable storage with approved access, custody, disposal and visitor controls. This targets the specific project decision. Physical security remains necessary even for cloud projects; an unlocked device or uncontrolled removable drive can bypass digital safeguards. Before committing, assess: Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices. It complements the associated assessment evidence. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.
Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices. This checks the relevant condition before the team intervenes. Physical security remains necessary even for cloud projects; an unlocked device or uncontrolled removable drive can bypass digital safeguards. The controlled response is: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. It complements the associated implementation step. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.
Incorrect Answers
Classify project records by sensitivity and restrict access to people with a genuine business need rather than making all collaboration files public. This is useful for Data classification and need-to-know permissions but is not one of the complementary steps for this case. The appropriate paired decision combines: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. and Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.
Inspect maintenance approval, affected services, backup or restore readiness, customer communication, and validation checks. This is useful for Infrastructure maintenance window and rollback but is not one of the complementary steps for this case. The appropriate paired decision combines: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. and Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.
Sensitive records are handled only for approved purposes, with restricted access and recorded controls appropriate to their classification. This is useful for Personally identifiable information and health data but is not one of the complementary steps for this case. The appropriate paired decision combines: Protect project locations and removable storage with approved access, custody, disposal and visitor controls. and Inspect badge permissions, visitor logs, device inventory, removable media rules, and secure storage practices. Situation: A vendor arrives at a data center carrying an unregistered USB drive for a planned firmware update.


