A change log is a record of all changes made to a system or application, including the date, time, description, and approval of each change. A change log can help an IS auditor to trace the source and authorization of a modification to a system's security settings. A system event correlation report is a tool that analyzes data from multiple sources to identify patterns and anomalies that indicate potential security incidents. A database log is a record of all transactions and activities performed on a database, such as queries, updates, and backups. A security incident and event management (SIEM) report is a tool that collects, analyzes, and reports on data from various sources to detect and respond to security incidents.

Disabling USB access for storage devices is a preventive control because it is intended to stop malware introduction before it occurs. ISACA explicitly describes disabling USB access for storage devices as a preventive control that makes it harder for users to introduce threats such as viruses into the environment.
Option C is correct because the control works in advance of the event. It prevents users from connecting removable storage that could carry malicious software or facilitate unauthorized data transfer.
Option A is incorrect because corrective controls act after an incident to restore or remediate conditions. USB blocking does not restore anything after infection.
Option B is not the best answer because although administrative policy may require the control, the specific control being described functionally prevents an unwanted event. In CISA questions, the functional type is the better classification here.
Option D is incorrect because the control is not physical; it is a logical/technical measure enforced through system configuration.
Therefore, C is the best answer because disabling USB storage access is designed to prevent malware from being introduced through physical media.
References (Official ISACA):
* ISACA, Specific Controls You Can Use - disabling USB access for storage devices is described as a preventive control.
* ISACA Journal, Addressing Cybersecurity Vulnerabilities - preventive controls are used to reduce exposure before compromise.

The most important factor to consider when developing a service level agreement (SLA) is the description of the services from the viewpoint of the client organization, because the SLA should reflect the needs and expectations of the client and specify the measurable outcomes and performance indicators that the provider must deliver34. The description of the services from the viewpoint of the provider, the detailed identification of work to be completed, and the provisions for regulatory requirements that impact the end users' businesses are also important elements of an SLA, but not as crucial as the client's perspective. References: 3: CISA Review Manual (Digital Version), Chapter 5, Section 5.3.1 4: CISA Online Review Course, Module 5, Lesson 3

This directly addresses the gap for new hires, creates a consistent expectation regardless of hiring date, and formalizes the process within organizational policy.
References
ISACA CISA Review Manual (Current Edition) - Chapters on Information Security Policies, Training and Awareness Industry Best Practices for Security Awareness - Emphasize the importance of timely and comprehensive training for new employees.

Thebest protectionfor a stolen laptop isfull disk encryption, which prevents unauthorized accesseven if the device is lost.
Option A (Incorrect):Remote wipe capabilitiesare useful, but theyrequire an internet connectionto function, which is not always available when a device is stolen.
Option B (Correct):Full disk encryption (FDE)ensures that data remainsunreadablewithout the correct decryption key,even if the hard drive is removed.
Option C (Incorrect):User awarenessis helpful, but itdoes not physically securedata on a lost device.
Option D (Incorrect):Password-protected filescan be bypassed by copying them to another system, making them an inadequate security measure.
Reference:ISACA CISA Review Manual -Domain 5: Protection of Information Assets- Coversencryption, data security, and endpoint protection.