6d • 🙋♂️ CISSP
CISSP Practice Question (Domain 7: Security Operations)
HR suspects a departing engineer copied source code to a personal drive. The engineer leaves Friday and the CTO wants IT to search the laptop today. What should the security operations manager do FIRST?
A. Have IT review the laptop's file history for proof
B. Disable the engineer's accounts and seize the laptop now
C. Preserve the device and logs under chain of custody with legal
D. Report the suspected theft to law enforcement
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
1
22 comments
CISSP Practice Question (Domain 7: Security Operations)
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
1
+32
2
+29
3
+25
4
+19
5
+17
Powered by