Exam 350-201 topic 1 question 93 discussion

Actual exam question from Cisco's 350-201

Question #: 93
Topic #: 1

Refer to the exhibit. An employee is a victim of a social engineering phone call and installs remote access software to allow an `MS Support` technician to check his machine for malware. The employee becomes suspicious after the remote technician requests payment in the form of gift cards. The employee has copies of multiple, unencrypted database files, over 400 MB each, on his system and is worried that the scammer copied the files off but has no proof of it. The remote technician was connected sometime between 2:00 pm and 3:00 pm over https. What should be determined regarding data loss between the employee's laptop and the remote technician's system?

A. No database files were disclosed
B. The database files were disclosed
C. The database files integrity was violated
D. The database files were intentionally corrupted, and encryption is possible

Show Suggested Answer

Suggested Answer: A 🗳️

by Bobster02 at Nov. 28, 2021, 12:30 a.m.

Comments

Submit Cancel

DrVoIP

9 months, 3 weeks ago

ince the employee is only worried that the scammer copied the files off but has no proof of it, it is not certain if the database files were actually disclosed. Therefore, the correct answer is (A) No database files were disclosed. However, to confirm this, the system should be thoroughly checked for any signs of data exfiltration or loss. Additionally, the employee should be reminded of the importance of not sharing sensitive information over the phone or installing remote access software from untrusted sources. - ChatGPT

upvoted 1 times

...

ETSec

10 months, 3 weeks ago

Selected Answer: B

B. The database files were disclosed It is possible that the scammer, who posed as an "MS Support" technician, copied the unencrypted database files from the employee's system during the remote session. The fact that the scammer requested payment in the form of gift cards, and the employee has copies of multiple, unencrypted database files on his system, suggests that the scammer may have taken the files. It is important to determine if the data was disclosed and if so, take steps to prevent further data breaches.

upvoted 2 times

...

Medjai89

11 months, 2 weeks ago

Disclosed means that is unencrypted. So answer b!

upvoted 1 times

...

jaciro11

1 year, 3 months ago

Selected Answer: A

A. No database files were disclosed Its simple the question ask about confidentiality no integrity

upvoted 3 times

...

chongchangchi

1 year, 8 months ago

Selected Answer: D

for DLP implementation or data security hardening of the employees laptop should be encrypted incase someone copied the data to usb storage or thru network the data has encrypted and cannot be read. according to this case the database is not encrypted but if the laptop encrypts the data, it should not be readable by the remote technicians and it says "worried that the scammer copied the files off but has no proof of it" so no proof the best solution is encryptions.

upvoted 1 times

jaciro11

1 year, 3 months ago

Man you need to read the question, they are asking about confidentiality no integrity, answer is A

upvoted 1 times

...

Bobster02

2 years ago

Selected Answer: A

A. No database files were disclosed

upvoted 3 times

...