212-82 Question #149: Real Exam Question with Answer & Explanation

Question

You are the Lead Cybersecurity Specialist at GlobalTech, a multinational tech conglomerate renowned for its avant-garde technological solutions in the aerospace and defense sector. The organization's reputation stands on the innovative technologies it pioneers, many of which are nation's top secrets. Late on a Sunday night, you are alerted about suspicious activities on a server holding the schematics and project details for a groundbreaking missile defense system. The indicators suggest a complex, multi-stage cyberattack that managed to bypass traditional security measures. Preliminary investigations reveal that the cybercrlmlnals might have used an Insider's credentials, further complicating the breach. Given the extremely sensitive nature of the data involved, a leak could have severe national security implications and irreparably tarnish the company's reputation. Considering the potential gravity and intricacies of this security incident, what immediate action should you undertake to handle this situation effectively, safeguard crucial data, and minimize potential fallout?

Options

• AInform the top executive board and legal team about the breach. Prepare a public statement to
• BInitiate the incident response protocol, focusing on immediate containment by isolating the
• CNotify federal agencies about the potential breach of national security. Work in tandem with them
• DEngage with an external specialized cybersecurity firm to conduct a parallel investigation,