Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
You cant just side step HR and Legal. They are there for a reason
D. Perform no action until HR or legal counsel advises on next steps Before any technical actions are taken, it is crucial to involve HR and legal counsel to assess the situation, understand the legal implications of Joe's actions, and determine the appropriate course of action. This ensures that any response is in compliance with employment laws and company policies.
Answer The best action for the incident response team to recommend in this scenario would be to perform no action until HR or legal counsel advises on next steps 1 5 6 . This is because Joe has not yet resigned or discussed his plans with his current supervisor, and it is unclear whether he has violated any company policies or laws. The incident response team should document the incident and report it to the appropriate stakeholders, such as HR or legal counsel, who can investigate the matter and determine the appropriate course of action. It is important to follow established policies and procedures and to involve the appropriate stakeholders to ensure that the incident is handled appropriately and legally. The incident response team should also conduct a lessons learned session after the incident to identify any areas of weakness in the organization's policies or procedures and to develop strategies to prevent similar incidents from happening in the future