nerdexam
CompTIA

220-1102 · Question #648

A technician is an administrator on a messaging application for a private work group of mixed departments. One of the technician's colleagues discloses to the group that their employer recently…

The correct answer is D. Contact the supervisor and report the colleague with screenshots of the messages. Disclosing details of a security breach - even internally - is a serious matter that can violate company policy, legal obligations (such as breach notification laws), and damage incident response efforts. The technician's first duty is to escalate to a supervisor and document…

Security

Question

A technician is an administrator on a messaging application for a private work group of mixed departments. One of the technician's colleagues discloses to the group that their employer recently suffered a major security breach and shared details about the breach to the group. Which of the following should the technician do first?

Options

  • AIgnore the messages as all of the group members work for the same employer.
  • BRemove the colleague from the group and ask members to delete the messages.
  • CMessage the colleague privately and ask the colleague to delete the messages immediately.
  • DContact the supervisor and report the colleague with screenshots of the messages.

How the community answered

(49 responses)
  • A
    10% (5)
  • B
    2% (1)
  • C
    6% (3)
  • D
    82% (40)

Explanation

Disclosing details of a security breach - even internally - is a serious matter that can violate company policy, legal obligations (such as breach notification laws), and damage incident response efforts. The technician's first duty is to escalate to a supervisor and document the messages with screenshots, ensuring there is a record for the organization to act on appropriately. Ignoring it is never acceptable for a serious security violation. Removing the colleague and asking members to delete messages destroys evidence. Messaging the colleague privately puts the burden on the technician to handle what is a management and legal issue, and gives the colleague time to further spread or delete information.

Topics

#Incident Response#Reporting Procedures#Information Security#Security Policy

Community Discussion

No community discussion yet for this question.

Full 220-1102 Practice