nerdexam
(ISC)2

SSCP · Question #195

Which of the following is most appropriate to notify an internal user that session monitoring is being conducted?

The correct answer is D. Written agreement. This is a tricky question, the keyword in the question is Internal users. There are two possible answers based on how the question is presented, this question could either apply to internal users or ANY anonymous/external users. Internal users should always have a written…

Submitted by yuriko_h· Apr 18, 2026Security Operations and Administration

Question

Which of the following is most appropriate to notify an internal user that session monitoring is being conducted?

Options

  • ALogon Banners
  • BWall poster
  • CEmployee Handbook
  • DWritten agreement

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    8% (2)
  • D
    85% (22)

Explanation

This is a tricky question, the keyword in the question is Internal users. There are two possible answers based on how the question is presented, this question could either apply to internal users or ANY anonymous/external users. Internal users should always have a written agreement first, then logon banners serve as a constant reminder. Banners at the log-on time should be used to notify external users of any monitoring that is being conducted. A good banner will give you a better legal stand and also makes it obvious the user was warned about who should access the system, who is authorized and unauthorized, and if it is an unauthorized user then he is fully aware of trespassing. Anonymous/External users, such as those logging into a web site, ftp server or even a mail server; their only notification system is the use of a logon banner.

Topics

#Session monitoring#User notification#Legal compliance#Security policy enforcement

Community Discussion

No community discussion yet for this question.

Full SSCP Practice