An employee finds a usb drive in the employee lunch room and plugs the drive into a shared workstation
to determine who owns the drive. When the drive is inserted, a command prompt opens and a script
begins to run. The employee notifies a technician who determines that data on a server have been
compromised. This is an example of:
A.
Device removal
B.
Data disclosure
C.
Incident identification
D.
Mitigation steps
As far as I am concerned, this is an example of plain stupidity.
The answers are also rather ambiguous
A. Device removal. This answer is to be discarded from the onset, as the device was clearly not removed. It was inserted.
B. Data disclosure. It says that “data on a server have been compromised”. It does not say that it has been disclosed as such, so this can also be discarded.
D. Mitigation steps – No mitigation steps have been taken as far as I can see.So this answer can also be discarded
This leaves “C. Incident identification” as the only possible answer.
Having said that. “Who identified the incident? The employee or the technician?
It was the employee who notified the incident to the technician, so I venture that the employee was both (a) the cause of the incident and (b) the one identifying/reporting it. The technician was later on being able to identify that “data on a server have been compromised”. But this is not the root cause of the incident, rather a direct outcome from it.
0
0