GIAC
GSEC · Question #71
GSEC Question #71: Real Exam Question with Answer & Explanation
Sign in or unlock GSEC to reveal the answer and full explanation for question #71. The question stem and answer options stay visible for context.
Question
A US case involving malicious code is brought to trial. An employee had opened a helpdesk ticket to report specific instances of strange behavior on her system. The IT helpdesk representative collected information by interviewing the user and escalated the ticket to the system administrators. As the user had regulated and sensitive data on her computer, the system administrators had the hard drive sent to the company's forensic consultant for analysis and configured a new hard drive for the user. Based on the recommendations from the forensic consultant and the company's legal department, the CEO decided to prosecute the author of the malicious code. During the court case, which of the following would be able to provide direct evidence?
Options
- AThe IT helpdesk representative
- BThe company CEO
- CThe user of the infected system
- DThe system administrator who removed the hard drive
Unlock GSEC to see the answer
You've previewed enough free GSEC questions. Unlock GSEC for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.