nerdexam
CompTIA

CS0-003 · Question #63

Joe, a leading sales person at an organization, has announced on social media that he is leaving his current role to start a new company that will compete with his current employer. Joe is…

The correct answer is D. Perform no action until HR or legal counsel advises on next steps. The best action for the incident response team to recommend in this scenario is to perform no action until HR or legal counsel advises on next steps. This action can help avoid any potential legal or ethical issues, such as violating employee privacy rights, contractual…

Submitted by kwame.gh· Mar 6, 2026Incident Response and Management

Question

Joe, a leading sales person at an organization, has announced on social media that he is leaving his current role to start a new company that will compete with his current employer. Joe is soliciting his current employer's customers. However, Joe has not resigned or discussed this with his current supervisor yet. Which of the following would be the best action for the incident response team to recommend?

Options

  • AIsolate Joe's PC from the network
  • BReimage the PC based on standard operating procedures
  • CInitiate a remote wipe of Joe's PC using mobile device management
  • DPerform no action until HR or legal counsel advises on next steps

How the community answered

(18 responses)
  • A
    22% (4)
  • B
    11% (2)
  • C
    6% (1)
  • D
    61% (11)

Explanation

The best action for the incident response team to recommend in this scenario is to perform no action until HR or legal counsel advises on next steps. This action can help avoid any potential legal or ethical issues, such as violating employee privacy rights, contractual obligations, or organizational policies. This action can also help ensure that any evidence or information collected from the employee's system or network is admissible and valid in case of any legal action or dispute. The incident response team should consult with HR or legal counsel before taking any action that may affect the employee's system or network.

Topics

#insider threat#legal counsel#HR policies#incident response decision-making

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice