Starting to study for Security+ using Darril Gibson's book I took the pre-exam and one of the latest questions is “What is the most security benefit of a clean desk policy?”
The choices are:
- Prevent illnesses due to viruses and bacteria
- Presents a positive image to customers
- Ensures sensitive data and passwords are secured
- Increases integrity of data
The bold one is the correct, and the author's explanation is: A clean desk policy requires users to organize their areas to reduce the risk of possible data theft and password compromise.
But I don't understand, why? What an organized desk has to do with security? I think this question only applies if the user stores his password in paper format.