ISC2 CC Security Operations Practice Question
A security awareness trainer is developing material on USB drop attacks. Which TWO messages should be included in the training? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Never plug in a USB drive that you found lying around.
Users should not plug in unknown USB drives as they may contain malware, and they should report found drives to security for safe handling.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use the USB drive only on a non-networked computer.
Why it's wrong here
Even isolated systems can be compromised.
- ✓
Never plug in a USB drive that you found lying around.
Why this is correct
Unknown USB drives can contain malicious software.
- ✗
Always scan a found USB drive with antivirus before using.
Why it's wrong here
Antivirus may not detect all malware, and it's safer not to plug it in at all.
- ✓
Report any discovered USB drives to the security team.
Why this is correct
Security can properly handle and dispose of the drive.
- ✗
Format the USB drive before using it.
Why it's wrong here
Some malware can survive formatting or infect the system before formatting.
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
Security awareness
Security awareness is the ongoing practice of educating people within an organization about cybersecurity risks, safe behaviors, and their individual responsibilities to protect information assets.
Key term
Malware
Malware is any software intentionally designed to cause damage, disrupt operations, steal data, or gain unauthorized access to computer systems.
About these practice questions
This CC question is part of Courseiva's 976-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.