CompTIA Security+ (SY0-501) — Question 300

A small- to medium-sized company wants to block the use of USB devices on its network. Which of the following is the MOST cost-effective way for the security analyst to prevent this?

Answer options

• A. Implement a DLP system
• B. Apply a GPO
• C. Conduct user awareness training
• D. Enforce the AUP.

Correct answer: B

Explanation

Applying a Group Policy Object (GPO) is the most cost-effective method to block USB devices, as it can centrally manage settings across multiple systems with minimal expense. In contrast, implementing a DLP system often involves higher costs for software and maintenance. User awareness training and enforcing an Acceptable Use Policy (AUP) may help in awareness but do not provide a technical solution to block USB access.