Which of the following is the BEST example of a cost-effective physical control to enforce a USB removable
media restriction policy?


A. Putting security/antitamper tape over USB ports, logging the port numbers, and regularly inspecting the
ports

B. Implementing a GPO that will restrict access to authorized USB removable media and regularly verifying
that it is enforced

C. Placing systems into locked, key-controlled containers with no access to the USB ports
D. Installing an endpoint agent to detect connectivity of USB and removable media