nerdexam
CompTIA

CAS-001 · Question #31

An employee was terminated and promptly escorted to their exit interview, after which the employee left the building. It was later discovered that this employee had started a consulting business…

The correct answer is B. Human Resources E. IT Management. Two business areas must be involved. Human Resources (B) is responsible for offboarding procedures and policies governing employee conduct, data handling agreements, and exit processes. The incident reveals a gap in HR policy - the employee was escorted out but removable media…

Integration of Computing, Communications and Business Disciplines

Question

An employee was terminated and promptly escorted to their exit interview, after which the employee left the building. It was later discovered that this employee had started a consulting business using screen shots of their work at the company which included live customer data. This information had been removed through the use of a USB device. After this incident, it was determined a process review must be conducted to ensure this issue does not recur. Which of the following business areas should primarily be involved in this discussion? (Select TWO).

Options

  • ADatabase Administrator
  • BHuman Resources
  • CFinance
  • DNetwork Administrator
  • EIT Management

How the community answered

(46 responses)
  • A
    2% (1)
  • B
    83% (38)
  • C
    11% (5)
  • D
    4% (2)

Explanation

Two business areas must be involved. Human Resources (B) is responsible for offboarding procedures and policies governing employee conduct, data handling agreements, and exit processes. The incident reveals a gap in HR policy - the employee was escorted out but removable media access was not blocked beforehand, and acceptable-use obligations were not enforced. IT Management (E) is responsible for enforcing technical controls such as disabling USB ports, implementing Data Loss Prevention (DLP), and revoking access to sensitive data immediately upon termination notification. Together, HR sets the policy and IT Management enforces it technically. A Database Administrator (A) and Network Administrator (D) are operational roles that implement specific technical tasks but do not set policy. Finance (C) has no direct role in this data exfiltration incident.

Topics

#insider threat#data exfiltration#USB controls#termination procedures

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice