Exam 350-201 topic 1 question 116 discussion

Actual exam question from Cisco's 350-201

Question #: 116
Topic #: 1

A security manager received an email from an anomaly detection service, that one of their contractors has downloaded 50 documents from the company's confidential document management folder using a company-owned asset al039-ice-4ce687TL0500. A security manager reviewed the content of downloaded documents and noticed that the data affected is from different departments. What are the actions a security manager should take?

A. Measure confidentiality level of downloaded documents.
B. Report to the incident response team.
C. Escalate to contractor's manager.
D. Communicate with the contractor to identify the motives.

Show Suggested Answer

Suggested Answer: B 🗳️

by DrVoIP at Feb. 18, 2023, 4:10 p.m.

Comments

Submit Cancel

DrVoIP

9 months, 3 weeks ago

The actions a security manager should take in this scenario are: Report to the incident response team: The incident response team should be notified immediately so they can take control of the situation, preserve evidence, and coordinate the response to the incident. Escalate to contractor's manager: The security manager should inform the contractor's manager about the incident, as it could be a breach of the contractor's agreement and can lead to the termination of the contract. Communicate with the contractor to identify the motives: The security manager should communicate with the contractor to understand the motive behind the download of the confidential documents. This will help in determining the severity of the incident and in taking appropriate actions to prevent similar incidents in the future. Measure confidentiality level of downloaded documents: The security manager should assess the level of confidentiality of the downloaded documents and determine the potential impact of the breach. ChatGPT

upvoted 1 times

...