CS0-003: CompTIA Cybersecurity Analyst (CySA+)

Question

A security alert was generated when an end user attempted to access a website that organizational policy does not permit. Because the action is considered a terminable offense, the SOC analyst gathers the authentication logs, web logs, and temporary files that reflect web searches from the user's workstation to build the investigation case. Which option is the best way to ensure the investigation complies with HR or privacy policies?

Explanation

Privacy- and HR-sensitive investigations should minimize exposure of user-identifiable information and limit evidence access to personnel directly involved in the investigation. Protecting the evidence and applying need-to-know access controls helps preserve confidentiality while allowing the case to be investigated.

CS0-003: CompTIA Cybersecurity Analyst (CySA+)

AstroTutor

Notes

Readiness

QuestionQ49

Community Discussion