nerdexam
GIAC

GCIH · Question #606

Stacy is the lead of the network services team. She suspects that Keith, one of the network administrators, is not spending as much time working as he states he is. She suspects he is spending time re

The correct answer is D. Direct Stacy to contact Human Resources to start an investigation. All requests for employee monitoring should come from Human Resources. No further actions should be taken from a technical standpoint without a formal request from Human Resources.

Incident Response & Cyber Kill Chain

Question

Stacy is the lead of the network services team. She suspects that Keith, one of the network administrators, is not spending as much time working as he states he is. She suspects he is spending time researching the screenplay he is writing about the office. She asks a security analyst to track Keith's web usage to verify what he is doing. What should the security analyst do next?

Options

  • ADirect Stacy to discuss her concerns with Keith regarding his work habits
  • BMonitor his web browsing and let Stacy know if anything is suspicious
  • CEmail the logs from the web content filter to Stacy
  • DDirect Stacy to contact Human Resources to start an investigation

How the community answered

(29 responses)
  • A
    17% (5)
  • B
    10% (3)
  • C
    3% (1)
  • D
    69% (20)

Explanation

All requests for employee monitoring should come from Human Resources. No further actions should be taken from a technical standpoint without a formal request from Human Resources.

Topics

#IR ethics#HR escalation#monitoring policy#incident handling procedure

Community Discussion

No community discussion yet for this question.

Full GCIH Practice