Exam 220-1102 topic 1 question 340 discussion

The security incident involving a USB drive installing malware on a workstation suggests a potential vector for unauthorized access. To prevent such incidents from happening again, consider the following actions: E. Disable AutoRun: Disabling AutoRun prevents the automatic execution of programs from USB drives when they are inserted into a computer. This helps in mitigating the risk associated with malicious software that might be automatically executed. G. Restrict user permissions: Restricting user permissions ensures that users have the minimum necessary privileges to perform their tasks. This can limit the impact of malware by reducing the permissions available to it. Users should not have unnecessary administrative privileges.

Can Someone explain why would it be G, Restrict user permissions? The question says the virus was covertly installed that basically means without the users interaction and knowledge. Yes restricting a users permissions can aid in reducing adware but if you plug in a malicious USB thumb drive you can still infect your computer even without running it. All adware is different so the next best thing would be F, Update the adware definitions. So even if you restrict them from opening it, some adware will still install just by being simple plugged in, example is a keylogger.

It’s E and G.