What is the typical response when someone is detected trying to access a database without permission?

The correct answer is C. The attempt is logged, and the user is blocked. Standard security practice for unauthorized access attempts is to: (1) log the attempt for audit and forensic purposes, and (2) block the user or source to prevent further attempts. This supports both detective and preventive controls. Issuing a warning (A) is insufficient and…

Incident Response Concepts

Question

Options

AThe user is given a warning
BThe user's account is deleted
CThe attempt is logged, and the user is blocked
DThe user is promoted to a higher access level

How the community answered

(32 responses)

A
3% (1)
B
3% (1)
C
94% (30)

Explanation

Standard security practice for unauthorized access attempts is to: (1) log the attempt for audit and forensic purposes, and (2) block the user or source to prevent further attempts. This supports both detective and preventive controls. Issuing a warning (A) is insufficient and alerts the attacker. Deleting the account (B) is too destructive without investigation. Elevating access (D) is the opposite of correct security behavior. Logging and blocking (C) is the industry-standard automated response.

Topics

#Incident Response#Access Control#Security Logging#Threat Mitigation

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice