Exam CS0-002 topic 1 question 353 discussion

How about DLP ? IMHO thats the correct answer

Confused by people saying asset tagging. “Asset tagging is the process of placing physical identification numbers of some sort on all assets. This can be as simple as a small label that identifies the asset and the owner”. Other way of asset tagging include the use of geolocation, geofencing and RFID. How does this help identify with systems have USB enabled?

Asset tagging is for more than just tracking, you also have a lot of useful information stored about what that asset is and how its configured within the database. "Asset tags correlate with asset records containing vendor documentation, configuration, and warranty information"

Asset tagging is for tracking physical asset, like a label for your laptop. SIEM logs will help the team to identify if the device got USB-enabled or not. Answer is D.

A security information and event management (SIEM) system is a tool that collects and analyzes log data from various sources and provides alerts and reports on security incidents and events. A SIEM system can help the IT team to determine which devices are USB enabled by querying the log data for events related to USB device insertion, removal, or usage. The other options are not relevant or effective for this purpose. References: CompTIA Cybersecurity Analyst (CySA+) Certification Exam Objectives (CS0-002), page 15;

To determine which devices are USB enabled, examine the Security Information and Event Management (SIEM) logs (Option D)

Asset tagging makes the most sense.

Asset Tagging

Asset tagging involves assigning unique identifiers or tags to each device in an organization's inventory. These tags can be used to track and manage devices, including their capabilities and features. By implementing asset tagging, the IT team can maintain a central database or inventory system that includes information about whether a device is USB-enabled.

Asset Tagging

Answer A

This one must be Asset Tagging.