After a company was compromised, customers initiated a lawsuit. The company's attorneys have requested that the security team initiate a legal hold in response to the lawsuit. Which of the following describes the action the security team will most likely be required to take?

Retain any communications related to the security breach until further notice.

Retain the emails between the security team and affected customers for 30 days.

Retain any communications related to the security breach until further notice.

Retain any communications between security members during the breach response.

Retain all emails from the company to affected customers for an indefinite period of time.

Which of the following is a security implication of using SDN over traditional methods?

Network device configuration can be dynamically adjusted to react to a detected security threat.

Network alerting and reporting is reduced due to lack of integration with analysis tools.

Network intrusion detection results in increased false positives or false negatives.

Network infrastructure is outsourced to a third-party vendor better suited to maintaining security.

CompTIA Security Plus Example Questions

Q 1 / 70 00:00

00:00 Elapsed

Question 1

A company filed a complaint with its IT service provider after the company discovered the service provider's external audit team had access to some of the company's confidential information. Which of the following is the most likely reason the company filed the complaint?

Your Answer: Option(s)

Correct Answer: Option(s) D

Rationale

A required NDA had not been signed.

The company's complaint likely stems from the lack of a Non-Disclosure Agreement (NDA), which is crucial for protecting confidential information from unauthorized access or disclosure. Without an NDA in place, the service provider's external audit team may have accessed sensitive information without proper legal safeguards, leading to the company's concerns.

A) The MOU had basic clauses from a template.
While a Memorandum of Understanding (MOU) with basic clauses might indicate a lack of thoroughness in the agreement, it does not directly address the issue of confidentiality. An MOU typically outlines the intentions and general agreements between parties but does not specifically govern the handling of confidential information like an NDA would.

B) A SOW had not been agreed to by the client.
The Statement of Work (SOW) outlines specific deliverables and services to be provided but does not inherently protect confidential information. The absence of an agreed SOW might lead to confusion about services rendered, but it does not directly relate to the unauthorized access of confidential data by the audit team.

C) A WO had not been mutually approved.
A Work Order (WO) describes specific tasks or jobs to be completed, but like an SOW, it does not serve to safeguard confidential information. Lack of mutual approval on a WO may affect project execution but does not have a direct bearing on the confidentiality of sensitive data shared with the service provider.

Conclusion
The filing of a complaint by the company is most likely due to the absence of a signed NDA, which is essential for ensuring that confidential information is protected from unauthorized access. While other agreements like MOUs, SOWs, and WOs are important for defining project scope and expectations, they do not specifically address the confidentiality concerns raised by the company's situation with the IT service provider.

Select an answer to continue →

0% score

0/0 correct

Answered 0/70

Correct 0

Wrong 0

70 left

Unlock Full Access

All questions, explanations & stats

Subscribe Now

Poker Exams is an independent exam-preparation site. We are not affiliated with, endorsed by, or sponsored by ATI, TEAS, Elsevier, or any other exam body, school, or certification provider. Exam and product names are trademarks of their respective owners and are used here only to identify the exams our practice materials cover.

A required NDA had not been signed.

Organized crime best describes the threat actor in the CISO’s report.

Retain any communications related to the security breach until further notice.

IaC (Infrastructure as Code) must be used in an organization that intends to automate infrastructure deployment.

Network device configuration can be dynamically adjusted to react to a detected security threat.

Free Preview Ended

Unlock Full Access

A required NDA had not been signed.

Organized crime best describes the threat actor in the CISO’s report.

Retain any communications related to the security breach until further notice.

IaC (Infrastructure as Code) must be used in an organization that intends to automate infrastructure deployment.

Network device configuration can be dynamically adjusted to react to a detected security threat.

Free Preview Ended

Unlock Full Access

You are leaving this quiz

You're in the middle of a quiz

Report an Issue

Rate this Practice Test