Department of Defense (DoD) Cyber Awareness Practice Exam 2026 - Free Cybersecurity Practice Questions and Study Guide

The choice highlighting that USB drives can carry malware is an important aspect of cybersecurity risk. USB drives are often used to transfer files between computers and other devices, which makes them convenient for users. However, this same convenience presents a significant risk: malicious software can be transferred onto a USB drive and later introduced to a secure system or network.

When an infected USB drive is connected to a computer, the malware can automatically execute, especially if the computer's security settings are not configured to prevent such actions. Once inside a network, this malware can compromise data integrity, steal sensitive information, or provide backdoor access for cyber attackers, posing serious security threats.

The other options, while they represent certain issues related to USB drives, do not encapsulate the primary risk in the context of cybersecurity to the same extent as the ability to carry malware. The risk of losing a USB drive is more of a data-loss concern rather than a direct cybersecurity threat, and concerns about small size or limited storage capabilities do not directly relate to the potential systemic vulnerabilities presented by malware infection. Therefore, the transmission of malware via USB drives stands out as the most critical risk within cybersecurity discussions.