nerdexam
CompTIA

SY0-501 · Question #310

A company is investigating a data compromise where data exfiltration occurred. Prior to the investigation, the supervisor terminates an employee as a result of the suspected data loss. During the inve

Sign in or unlock SY0-501 to reveal the answer and full explanation for question #310. The question stem and answer options stay visible for context.

Submitted by dimitri_ru· Mar 4, 2026Security operations

Question

A company is investigating a data compromise where data exfiltration occurred. Prior to the investigation, the supervisor terminates an employee as a result of the suspected data loss. During the investigation, the supervisor is absent for the interview, and little evidence can be provided form the role-based authentication system in use by the company. The situation can be identified for future mitigation as which of the following?

Options

  • AJob rotation
  • BLog failure
  • CLack of training
  • DInsider threat

Unlock SY0-501 to see the answer

You've previewed enough free SY0-501 questions. Unlock SY0-501 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#log management#incident investigation#audit logging#data exfiltration
Full SY0-501 Practice