nerdexam
CompTIA

SY0-301 · Question #657

The use of social networking sites introduces the risk of:

The correct answer is A. Disclosure of proprietary information. Social networking sites pose a risk of employees inadvertently or deliberately disclosing proprietary or confidential company information to the public.

Threats, vulnerabilities, and mitigations

Question

The use of social networking sites introduces the risk of:

Options

  • ADisclosure of proprietary information.
  • BData classification issues.
  • CData availability issues.
  • DBroken chain of custody.

How the community answered

(59 responses)
  • A
    88% (52)
  • B
    3% (2)
  • C
    2% (1)
  • D
    7% (4)

Why each option

Social networking sites pose a risk of employees inadvertently or deliberately disclosing proprietary or confidential company information to the public.

ADisclosure of proprietary information.Correct

Employees using social networks may post details about internal projects, client relationships, system configurations, or business strategies that constitute proprietary information. Once disclosed publicly on platforms like LinkedIn or Twitter, this information cannot be recalled and may benefit competitors or attackers. This is the primary and most direct security risk associated with employee social networking activity.

BData classification issues.

Data classification is an internal process for labeling data sensitivity and is not directly caused or disrupted by employee use of social networking sites.

CData availability issues.

Data availability refers to uptime and access to data resources; social networking does not affect whether internal data remains available to authorized users.

DBroken chain of custody.

Chain of custody is a forensic and legal concept relating to evidence handling and is unrelated to the risks posed by social networking site usage.

Concept tested: Social networking data disclosure and information security risk

Source: https://csrc.nist.gov/publications/detail/sp/800-114/rev-1/final

Topics

#social networking#proprietary information#data disclosure#risk

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice