GIAC
GCIH · Question #606
GCIH Question #606: Real Exam Question with Answer & Explanation
Sign in or unlock GCIH to reveal the answer and full explanation for question #606. The question stem and answer options stay visible for context.
Incident Response & Cyber Kill Chain
Question
Stacy is the lead of the network services team. She suspects that Keith, one of the network administrators, is not spending as much time working as he states he is. She suspects he is spending time researching the screenplay he is writing about the office. She asks a security analyst to track Keith's web usage to verify what he is doing. What should the security analyst do next?
Options
- ADirect Stacy to discuss her concerns with Keith regarding his work habits
- BMonitor his web browsing and let Stacy know if anything is suspicious
- CEmail the logs from the web content filter to Stacy
- DDirect Stacy to contact Human Resources to start an investigation
Unlock GCIH to see the answer
You've previewed enough free GCIH questions. Unlock GCIH for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#IR ethics#HR escalation#monitoring policy#incident handling procedure