PrepAway - Latest Free Exam Questions & Answers

Which of the following should the user do NEXT?

A user has received an email from an external source which asks for details on the company’s new product line
set for release in one month. The user has a detailed spec sheet but it is marked “Internal Proprietary
Information”. Which of the following should the user do NEXT?

PrepAway - Latest Free Exam Questions & Answers

A.
Contact their manager and request guidance on how to best move forward

B.
Contact the help desk and/or incident response team to determine next steps

C.
Provide the requestor with the email information since it will be released soon anyway

D.
Reply back to the requestor to gain their contact information and call them

Explanation:
This is an incident that has to be responded to by the person who discovered it; in this case it is the user. An
incident is any attempt to violate a security policy, a successful penetration, a compromise of a system, or any
unauthorized access to information. It’s important that an incident response policy establish at least the
following items:
Outside agencies that should be contacted or notified in case of an incident
Resources used to deal with an incident
Procedures to gather and secure evidence
List of information that should be collected about an incident
Outside experts who can be used to address issues if needed
Policies and guidelines regarding how to handle an incident
Since the spec sheet has been marked Internal Proprietary Information, the user should refer the incident to the
incident response team.


Leave a Reply