An Incident Response Team Has Determined That Multiple Incidents Are

question 287

Multiple Choice

An incident response team has determined that multiple incidents are resulting from the same user action of copying sensitive data to USB devices. Which action should the incident response team take to fix this issue so only one incident per action is detected?

• A) create separate policies for the different detection methods
• B) combine multiple conditions into one compound rule
• C) change which 'Endpoint Destinations' are monitored
• D) change the monitor/ignore filters in the agent configuration

---

Definitions:

Truth-in-Lending Act

A national regulation aiming to encourage knowledgeable utilization of consumer credit through mandatory disclosures regarding its conditions and expenses.

Natural Person

A human being, as opposed to a legal entity such as a corporation, recognized as a legal subject with rights and obligations.

Real Estate Transactions

Legal agreements involving the transfer of ownership or rights in real property from one party to another.

HUD

The United States Department of Housing and Urban Development, a federal agency responsible for national policies and programs addressing America's housing needs.