A security team discovers employees are using personal USB drives to transfer files to and from corporate laptops in violation of policy. Which endpoint control BEST technically enforces the USB restriction?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — d is correct because device control policies technically enforce the USB restriction at the operating system level, blocking unauthorized removable media regardless of user intent or awareness. Logging provides visibility into attempts.
Full explanation below image
Full Explanation
D is correct because device control policies technically enforce the USB restriction at the operating system level, blocking unauthorized removable media regardless of user intent or awareness. Logging provides visibility into attempts. A is wrong because policy reminders without technical enforcement do not prevent intentional or accidental violations. C is wrong because policy acknowledgment is a governance control, not a technical prevention. B is wrong because encrypting laptop data does not prevent data from being copied to an unencrypted USB drive.