An incident response technician has confiscated a powered mobile device suspected of containing unencrypted corporate data relevant to an ongoing investigation. To preserve forensic integrity, the technician must prevent the device from receiving remote signals—such as a remote wipe or locking command via cellular networks, Wi-Fi, or Bluetooth—while transporting it to the digital forensics laboratory. Which physical security control is most effective for this scenario?
- Enclosing the device in a Faraday bagAnswer
- BAttaching a Kensington cable lock to the chassis
- CApplying a polarized privacy filter over the display screen
- DSecuring the device inside a biometric lockbox without shielding
Answer
Enclosing the device in a Faraday bag is the most effective physical control to prevent wireless signals from reaching the device during transit.
Enclosing the device in a Faraday bag blocks electromagnetic signals (radio frequency shielding), preventing cellular, Wi-Fi, and Bluetooth signals from connecting to the device and triggering a remote wipe or lock command.
Step-by-Step Solution
Key Concept
RF Shielding / Faraday Enclosures for Physical Security