The scenario describes an attack vector where insiders or malicious actors use removable media

(USB drives) to introduce malware, which then connects to external sources to exfiltrate data and

compromise systems.

Option B addresses the human factor and technological prevention. The guide stresses the need for

training to ensure users are aware of social engineering and removable media risks. Blocking the use

of USB drives at a system level further minimizes attack vectors.

Option E, using Multi-Factor Authentication (MFA), provides an additional layer of defense. Even if

credentials are stolen, MFA can prevent the attacker from accessing sensitive internal resources

without the second authentication factor.

These controls align with defense-in-depth strategies recommended in the Cisco CyberOps Associate

curriculum to combat insider threats and external unauthorized access.