reasons why an organization may opt to enforce security of its computer systems by restricting the use of removable media

​One way in which an organization enforces security of its computer systems is by restricting the use of removable media such as floppy disks and flash memories. Give two reasons for this.

Question Statistics

Source: KCSE Computer Studies 2012 - Paper 1
Question Number: 3
Marks: 2 marks
From Topic: Data Security and Controls
From Subtopic: Security threats and control measures
Question Level: Form 1

A Brief Real Story

Sometimes back, a man visited a canteen where bankers took their lunch. The canteen was very popular with bankers where they could meet everyday and have a snack. This man's aim was not to have a snack either but to rob the bank using some malicious software.
What did he do then?
He had created a malware and saved in a flashdisk. He therefore dropped the flash disk in the canteen intentionally. It was then picked by unsuspecting lady who sought who the owner was, upon failing to get the owner, she carried the disk to the bank and opened it in one of the bank's computers.
The malware installed itself into the system, corrupted files and collected necessary information to rob the bank and submitted to the owner. In few hours, money was illegally wired out from the bank amounting to millions of shillings.
What does this story teach us?

​What are the intentions of an examiner?

The examiner is testing on the following areas;

1. Whether you know precautionary measures involved when handling removable storage devices.
2. Whether you understand the security of confidential and private data and measures you can take to control unauthorised access.

Are there any tricks to the question?

Absolutely not. This question is straightforward and understandable on the first glance. The question is asking us to give reasons why a firm may opt to restrict the use of removable storage devices in its premises. It is bare bones, point blank and clear.

​Are there mistakes that most students may make?

Of course, students never cease to amaze and one of the mistakes that students may make is lack of keenly identifying and understanding the keywords such as removable and security.

​KNEC Marking Scheme & Answers

• To minimize/control spread of viruses.
• To control access to data/programs.
• To control movement of data.
• To control unauthorized access to data/information.

​How Marks are awarded?

Two marks for the first two clearly stated answers. [2 x 1 = 2 mks]

---

More kcse & mock papers