Question

Difficulty: MediumPhysical Security Controls

An IT forensic technician is preparing to transport a confiscated smartphone containing critical evidence to a secure testing facility. To ensure the device cannot be wiped remotely or altered via cellular or wireless networks while in transit, which of the following physical security controls should be used?

  1. A Faraday bagAnswer
  2. B
    A tamper-evident seal
  3. C
    A physical cable lock
  4. D
    An RFID asset tag

Answer

A Faraday bag is the appropriate physical control to isolate the mobile device from all wireless communication signals during transit.
A Faraday bag provides electromagnetic shielding that blocks all incoming and outgoing wireless signals (cellular, Wi-Fi, Bluetooth, GPS). This physically prevents remote wipe commands or unauthorized network connectivity while the mobile phone is transported.

Step-by-Step Solution

1
Identify the threat presented in the scenario.
The main threat is unauthorized remote access or remote wiping of the device over cellular, Wi-Fi, or Bluetooth networks.
Securing physical evidence requires maintaining digital chain of custody and preventing data destruction.
2
Evaluate physical security controls for electromagnetic shielding capability.
Faraday bags create a metallic enclosure (Faraday cage effect) that prevents radio frequency (RF) signals from penetrating.
Without RF signals, the device cannot receive remote wipe commands or connect to outside networks.
3
Distinguish from non-shielding physical controls.
Tamper-evident seals, cable locks, and RFID tags serve physical anti-theft, inventory, or anti-tampering functions but lack electromagnetic shielding capabilities.
Selecting a control designed for physical theft or tracking will not mitigate the network-based threat of a remote wipe.

Key Concept

Faraday Enclosure / Signal Shielding
Rate this question