CAS-001 Question #145: Real Exam Question with Answer & Explanation

The correct answer is C: A screen displayed at log in that informs users of the employer's rights to seize, search, and monitor. A login banner (warning screen displayed at logon) that explicitly informs users of the employer's right to seize, search, and monitor systems establishes informed legal notice. By continuing past the banner and using the system, the employee has been notified of and implicitly a

Question

If a technician must take an employee's workstation into custody in response to an investigation, which of the following can BEST reduce the likelihood of related legal issues?

Options

AA formal letter from the company's president approving the seizure of the workstation.
BA formal training and awareness program on information security for all company managers.
CA screen displayed at log in that informs users of the employer's rights to seize, search, and monitor
DA printout of an activity log, showing that the employee has been spending substantial time on

Explanation

A login banner (warning screen displayed at logon) that explicitly informs users of the employer's right to seize, search, and monitor systems establishes informed legal notice. By continuing past the banner and using the system, the employee has been notified of and implicitly acknowledged these rights, which significantly reduces the organization's legal exposure during an investigation. This is a well-established legal practice (analogous to law enforcement use of warning notices). Option A (a letter from the president) is not a systematic, preemptive control. Option B (training for managers) does not directly establish user consent. Option D (an activity log) documents wrongdoing but does not preemptively address the legal authority to seize the device.

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice