Study guide · 7.3
Understand device security
Device security protects the hardware you use and the data on it. Key habits include treating unknown portable media with caution, encrypting devices and controlling access to the camera.
A study feature written by ExamDragon, not part of the real exam. Each heading is one of Certiport's skills for this objective.
7.3.1Identify methods of protecting against untrusted portable media devices
- Portable media include USB flash drives, external drives, memory cards and phones connected by cable.
- Never plug in a USB drive you found or were given by a stranger; it may carry malware or be designed to attack the computer.
- Keep antivirus or built-in security software on and let it scan removable drives.
- Turn off AutoPlay or AutoRun so media does not open or run programs automatically.
- Organisations may block unknown USB devices by policy; use approved drives or cloud sharing instead.
- Be wary of public USB charging ports; use your own charger or a charge-only cable.
Example: An employee finds a USB drive labelled 'Salaries' in the car park and hands it to IT instead of plugging it into a work computer.
7.3.2Define device encryption and identify encryption methods
- Encryption scrambles data so only someone with the correct key, password or PIN can read it.
- Full-disk encryption protects everything on a device's drive if it is lost or stolen; examples are BitLocker on Windows and FileVault on macOS.
- Modern smartphones usually encrypt their storage when a passcode is set.
- Files, archives and removable drives can be encrypted individually.
- Data in transit is encrypted by protocols such as HTTPS, and end-to-end encryption in some messaging apps means only the people in the chat can read messages.
- Store the recovery key safely; without it, encrypted data may be impossible to recover.
Example: A teacher's laptop with student records is stolen; because full-disk encryption was on, the thief cannot read the drive.
7.3.3Explain when blocking camera access is appropriate and necessary
- Block camera access for apps and websites that have no need for it, using the device's privacy settings.
- Grant camera permission only while using an app, or only once, when that option exists.
- Cover or close the camera with a privacy shutter when not in use, especially in private spaces.
- A camera indicator light or icon shows when the camera is active; investigate if it comes on unexpectedly.
- Turn the camera off in meetings when it is not needed, and follow workplace or exam rules about cameras.
Example: A user reviews camera permissions and finds a flashlight app has camera access it does not need, so she removes it.
Key terms
- Portable media
- Removable storage devices such as USB drives and memory cards.
- AutoPlay
- A feature that automatically opens or runs content when media is connected.
- Encryption
- Converting data into a coded form that requires a key to read.
- Full-disk encryption
- Encryption of an entire storage drive.
- Recovery key
- A backup code used to unlock encrypted data if the normal password fails.
- App permission
- A setting that allows or blocks an app's access to a feature such as the camera.
Easy to confuse
- Encryption protects data if a device is lost, but not if someone already knows your password.
- Deleting files from a USB drive does not make the drive safe to share; it may still carry malware or recoverable data.
- Blocking the camera in one app does not block it for other apps.
After this guide: You can protect devices from untrusted portable media, explain device encryption and decide when to block camera access.