Suppose that I have files that I'm afraid to even expose to a system that is connected to the Internet. Therefore, I've put them on a separate computer, which does not have Wi-Fi or any other sort of Internet connection.
Though, this means that it's still accessible by USB flash drives and it still has Ethernet ports (since that's relevant to my job) which can be used to connect to the Internet. I know I can disable all USB ports but can I also disable all networks, the creation of new network connections and any sort of access to the functions that might enable people to do so, unless I need them?
I don't want to deal with ports every time I need to test code or equipment. I already have my firewall configured and don't want to disrupt that. What I'm essentially looking for, is a way to doubly secure the computer. What if I forget to lock my computer and within the five minutes it takes to go to the lock screen someone accesses it? Even if people can access the computer, I don't want them to be able to send anything out or in during that time, unless they provide my password.
P.S. The title is about physical Ethernet ports where you have to jack a cable in, not the ports that are configured by software inside the computer.