nerdexam
CompTIA

CAS-003 · Question #366

Ann, a terminated employee, left personal photos on a company-issued laptop and no longer has access to them. Ann emails her previous manager and asks to get her personal photos back. Which of the…

The correct answer is D. Consult with the legal and/or human resources department and check company policies around. Responding to data requests from terminated employees requires consulting legal and HR to ensure the response aligns with company policy and applicable legal obligations.

Risk Management

Question

Ann, a terminated employee, left personal photos on a company-issued laptop and no longer has access to them. Ann emails her previous manager and asks to get her personal photos back. Which of the following BEST describes how the manager should respond?

Options

  • ADetermine if the data still exists by inspecting to ascertain if the laptop has already been wiped
  • BInform Ann that the laptop was for company data only and she should not have stored personal
  • CReport the email because it may have been a spoofed request coming from an attacker who is
  • DConsult with the legal and/or human resources department and check company policies around

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    8% (2)
  • D
    88% (21)

Why each option

Responding to data requests from terminated employees requires consulting legal and HR to ensure the response aligns with company policy and applicable legal obligations.

ADetermine if the data still exists by inspecting to ascertain if the laptop has already been wiped

Checking whether the data still exists is a technical step, not a policy decision - it does not address whether the company is permitted or required to return the data.

BInform Ann that the laptop was for company data only and she should not have stored personal

Dismissing the request by citing a data-use policy without involving legal or HR bypasses the governance process and could expose the company to legal liability.

CReport the email because it may have been a spoofed request coming from an attacker who is

Treating the email as a spoofed attack without first following HR and legal procedures is an overreaction that fails to address the legitimate policy question at hand.

DConsult with the legal and/or human resources department and check company policies aroundCorrect

Terminated employee data requests carry potential legal and compliance implications, including employment agreements, data retention laws, and privacy regulations. Consulting legal and HR ensures the decision is governed by established policy and protects the company from liability. This also provides a documented, defensible process for any follow-up disputes or regulatory inquiries.

Concept tested: Terminated employee data request governance process

Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final

Topics

#data ownership policy#employee termination#HR processes#legal compliance

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CAS-003 Practice