Proprietary information for your company's online business was released to a competitor. Which of the following preventative measures should your company take to ensure that its proprietary…

Question

Options

• ARestrict Internet access.
• BUninstall any e-mail clients.
• CMonitor employees' messages.
• DDestroy all proprietary information.

• A
  2% (1)
• B
  11% (6)
• C
  83% (45)
• D
  4% (2)

Explanation

Monitoring employees' messages (C) directly addresses the root cause - an insider data leak - by creating accountability and deterrence against unauthorized sharing of sensitive information, while also providing evidence if a breach occurs.

Why the distractors fail:

• A (Restrict Internet access) is too broad and impractical; it disrupts legitimate business operations without targeting the specific threat vector.
• B (Uninstall e-mail clients) eliminates a key business communication tool and doesn't prevent leaks through other channels (USB drives, screenshots, printing, etc.).
• D (Destroy proprietary information) is counterproductive - the goal is to protect valuable information, not eliminate it.

Memory tip: Think "monitor = accountability." When proprietary data walks out the door, the culprit is almost always a person with access. The correct control targets behavior, not infrastructure. On security exams, answers that address the human element (monitoring, access controls, policies) typically beat answers that damage or restrict core business capabilities.

No community discussion yet for this question.