nerdexam
CompTIA

SY0-301 · Question #61

A company storing data on a secure server wants to ensure it is legally able to dismiss and prosecute staff who intentionally access the server via Telnet and illegally tamper with customer data…

The correct answer is C. Warning banners. Warning banners are an administrative control that legally notifies all users - including employees - that the system is for authorized use only, that their activity may be monitored, and that unauthorized access or misuse is subject to disciplinary action and/or criminal…

Security program management and oversight

Question

A company storing data on a secure server wants to ensure it is legally able to dismiss and prosecute staff who intentionally access the server via Telnet and illegally tamper with customer data. Which of the following administrative controls should be implemented to BEST achieve this?

Options

  • ACommand shell restrictions
  • BRestricted interface
  • CWarning banners
  • DSession output pipe to /dev/null

How the community answered

(55 responses)
  • A
    4% (2)
  • B
    7% (4)
  • C
    76% (42)
  • D
    13% (7)

Explanation

Warning banners are an administrative control that legally notifies all users - including employees - that the system is for authorized use only, that their activity may be monitored, and that unauthorized access or misuse is subject to disciplinary action and/or criminal prosecution. Without a warning banner, employees could argue they were unaware their actions were prohibited or monitored, undermining any legal case. A warning banner establishes informed consent and creates the legal foundation needed for both HR dismissal and criminal prosecution. The other options are technical controls: command shell restrictions and restricted interfaces limit what users can do, and piping session output to /dev/null would destroy audit evidence rather than help prosecute anyone.

Topics

#warning banners#administrative controls#legal compliance#access authorization

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice