Exam CRISC topic 1 question 521 discussion

The answer is D, remote wipe. Remote monitoring is not a protection mechanism.

Answer is C prioritizing strong passwords and encryption as they provide proactive security, while remote wiping is a reactive measure that may not always be effective

Data encryption more important than data wipe, because when the risk occurs (data loss) the data wiping will not help us to return the data.

While both options C and D are strong protective measures, the BEST protection from data loss (especially considering situations where a device is lost or stolen) would be: D. Enable data wipe capabilities. It ensures that even if preventive measures fail (like passwords being bypassed), the data can still be removed to prevent compromise.

D. Enable data wipe capabilities Allowing employees to bring their own devices to the workplace and connect them to the corporate network (BYOD) presents various security challenges. Of the options provided, enabling data wipe capabilities offers the best protection against data loss. If a personal device is lost or stolen, the organization can remotely wipe corporate data from that device, ensuring that sensitive information doesn't fall into the wrong hands.

Going with "C". Remote wiping -as I assume will be handled by the Administrator manually- this process might take time until the owner of the device discovered it was stolen. If the device is not encrypted with strong password authentication what remote wiping will do then ?. The data already stolen

C seems the best answer to me. It inherently protects against loss of confidentiality. But I have this nagging doubt that somewhere in the 7th edition study guide I read that remote wipe was for data loss.

C is certainly the answer here. (don't bother about the answer provided as it makes no sense. How can remote monitoring protect data loss?).

I say C is the correct answer. Strong password and data encryption will protect data loss. How can remote monitoring protect data loss?

I will go with C , even D is one option but not feasible most of the time.

CISA/CISM is C

I'll go with C.

I dont think they can enable data wipe capabilities on phones that they don't own so therefore I dont think it is D.

I will go with C