Exam CS0-002 topic 1 question 418 discussion

I assume that if a manager asks a security analyst to provide information about the web browsing history of an employee, this is because a security issue is involved. If it is the case, you cannot get involved the user in this research because you will be alerting the probable suspect and something could be tempered or altered, but where this history cannot be deleted/tempered is in the proxy server. For example, if the employee has been visiting websites that are known to be associated with malware or phishing attacks, then this could be evidence that they are planning an attack. For me, es the option B

Before accessing an employee's web-browsing history or conducting any form of digital surveillance, it is essential to obtain proper authorization and permission from relevant parties, including HR, legal, and possibly the employee in question. Privacy and legal considerations must be respected, and any actions taken should be in compliance with company policies and relevant laws and regulations.

At the end of the day it's a manager asking, likely only one step above the employee in the organisation. I don't think you'd ask for permission from the employee but from HR or senior leadership.

Permission lol? You’re giving the user all the time to delete relevant sites, this defeats the purpose of the investigation. I go with B, use the proxy server.