The security administrator is currently unaware of an incident that occurred a week ago. Which of
the following will ensure the administrator is notified in a timely manner in the future?
A.
User permissions reviews
B.
Incident response team
C.
Change management
D.
Routine auditing
Stupid answer. How does auditing, an after the fact process, inform in a timely manner?
0
0
That’s why it says “in the future”, its asking what can be implemented in the future to ensure it doesn’t happen again.
0
0
This should be B. Incident response team
Routine Audit: What is the routine DAILY not usually. Weekly or monthly. Well it says a week is too late so a routine audit would not inform the admin any sooner. The Incident response team should be takes to inform when an incident occurs.
0
0
…Incident response team should be TASKED…
0
0