CISSP Question #35: Real Exam Question with Answer & Explanation

Question

Which security action should be taken FIRST when computer personnel are terminated from their jobs?

Options

• ARemove their computer access
• BRequire them to turn in their badge
• CConduct an exit interview
• DReduce their physical access level to the facility

Explanation

The first security action that should be taken when computer personnel are terminated from their jobs is to remove their computer access. Computer access is the ability to log in, use, or modify the computer systems, networks, or data of the organization. Removing computer access can prevent the terminated personnel from accessing or harming the organization's information assets, or from stealing or leaking sensitive or confidential data. Removing computer access can also reduce the risk of insider threats, such as sabotage, fraud, or espionage. Requiring them to turn in their badge, conducting an exit interview, and reducing their physical access level to the facility are also important security actions that should be taken when computer personnel are terminated from their jobs, but they are not as urgent or critical as removing their computer

No community discussion yet for this question.