Exam CS0-001 All Questions

View all questions & answers for the CS0-001 exam

Exam CS0-001 topic 1 question 366 discussion

Actual exam question from CompTIA's CS0-001

Question #: 366
Topic #: 1

A security analyst at a large financial institution is evaluating the security posture of a smaller financial company. The analyst is performing the evaluation as part of a due diligence process prior to a potential acquisition. With which of the following threats should the security analyst be MOST concerned? (Choose two.)

A. Breach of confidentiality and market risks can occur if the potential acquisition is leaked to the press.
B. The parent company is only going through this process to identify and steal the intellectual property of the smaller company.
C. Employees at the company being acquired will be hostile to the security analyst and may not provide honest answers.
D. Employees at the company being acquired will be hostile to the security analyst and may not provide honest answers.
E. The industry regulator may decide that the acquisition will result in unfair competitive advantage if the acquisition were to take place.
F. The company being acquired may already be compromised and this could pose a risk to the parent company's assets.

Show Suggested Answer

Suggested Answer: EF 🗳️

by Rowlandmarc at May 25, 2020, 8:12 a.m.

Comments

Submit Cancel

jackdawson

4 years, 8 months ago

When on earth do security analysts deal with industry regulators on market competition??

upvoted 1 times

...

ITeaGuy

4 years, 9 months ago

Most concerned... Information leaking to the market is not as much a risk to the company a e and F are...

upvoted 1 times

...

[Removed]

4 years, 9 months ago

A & F are the correct answers

upvoted 2 times

...

B1llGat3s

4 years, 11 months ago

This is a bit of an unfair question. The answers are A and E. Key to this is "prior to a potential acquisition". Anyone who has prior knowledge of a potential acquisition, or an acquisition in progress before it is announced to the market, is classed as an "insider" and could be subject to criminal proceedings if they use their inside position to profit from their knowledge. The company will have strict rules about who he can speak to, whether he can deal in shares etc. Answer A has nothing to do with him being a security guy, ANYONE who has prior knowledge (auditors, accountants, execs etc) is subject to this.

upvoted 2 times

B1llGat3s

4 years, 11 months ago

Sorry, I made a typo. Answers A and F (not E, which is total bollocks).

upvoted 4 times

Hisandy

4 years, 11 months ago

I think answers should be A and F too.

upvoted 3 times

...

Blind_Hatred

5 years ago

It's A and F. F is a no-brainer, and A because it's part of "Corporate Confidential" data.

upvoted 4 times

Blind_Hatred

5 years ago

From "Cybersecurity Analyst Certification Bundle": Mergers and Acquisitions Data about upcoming mergers and acquisitions of a company is a type of sensitive corporate information whose misuse is most often associated with fraud and conspiracy. If information about an upcoming acquisition were to be prematurely disclosed because of a malicious actor, it could have grave consequences on the finances of both companies.

upvoted 3 times

...

shoop

5 years, 1 month ago

something's gone horribly wrong with this question -- two answers are identical, and only one answer, E, is satisfactory

upvoted 1 times

Printer_Micromanager

5 years ago

I also don't understand why a security analyst would be concerned over what potential approvals or disapprovals will take place. The security analyst is mostly concerned about cycbersecurity.

upvoted 1 times

...

Rowlandmarc

5 years, 1 month ago

C/D & F should be the answer as they are the only security related ones....

upvoted 3 times

s3curity1

5 years, 1 month ago

Agree. The security analyst shouldn't even be concerned with the industry regulators in letter E.

upvoted 1 times

...

Death2QuestionWriters

4 years, 9 months ago

A and F. C/D have nothing to do with cybersecurity. What's this analyst supposed to do to determine potential employee hostility? Go in with a polygraph??

upvoted 2 times

...