nerdexam
Cisco

200-201 · Question #208

Refer to the exhibit. Which stakeholders must be involved when a company workstation is compromised?

The correct answer is D. Employee 2, Employee 3, Employee 4, Employee 5. A workstation compromise requires a multidisciplinary incident response, involving IT security for technical resolution, legal for compliance, HR for personnel matters, and the affected user for information.

Submitted by ravi_2018· Mar 6, 2026Security Policies and Procedures

Question

Refer to the exhibit. Which stakeholders must be involved when a company workstation is compromised?

Exhibit

200-201 question #208 exhibit

Options

  • AEmployee 1 Employee 2, Employee 3, Employee 4, Employee 5, Employee 7
  • BEmployee 1, Employee 2, Employee 4, Employee 5
  • CEmployee 4, Employee 6, Employee 7
  • DEmployee 2, Employee 3, Employee 4, Employee 5

How the community answered

(31 responses)
  • A
    6% (2)
  • B
    23% (7)
  • C
    10% (3)
  • D
    61% (19)

Why each option

A workstation compromise requires a multidisciplinary incident response, involving IT security for technical resolution, legal for compliance, HR for personnel matters, and the affected user for information.

AEmployee 1 Employee 2, Employee 3, Employee 4, Employee 5, Employee 7

This option includes roles (Employee 1, Employee 7) that are less directly involved in the immediate technical and organizational response to a compromise, potentially including general users or high-level executives who are informed rather than active responders.

BEmployee 1, Employee 2, Employee 4, Employee 5

This option omits Legal Counsel (Employee 3), a crucial stakeholder for addressing legal obligations and potential compliance issues arising from a data breach or system compromise.

CEmployee 4, Employee 6, Employee 7

This option omits key roles such as the IT/Security Team (Employee 2) responsible for technical remediation and the affected user (Employee 5) who can provide critical context.

DEmployee 2, Employee 3, Employee 4, Employee 5Correct

Employee 2 (IT/Security Team), Employee 3 (Legal Counsel), Employee 4 (HR), and Employee 5 (Affected User) are all critical stakeholders in incident response, covering technical investigation, legal ramifications, personnel management, and user cooperation respectively.

Concept tested: Incident response stakeholders

Source: https://learn.microsoft.com/en-us/security/compass/incident-response-plan

Topics

#incident response#stakeholder management#security policies#organizational roles

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 200-201 Practice