At a Meeting, the Systems Administrator States the Security Controls

question 117

Multiple Choice

At a meeting, the systems administrator states the security controls a company wishes to implement seem excessive, since all of the information on the company's web servers can be obtained publicly and is not proprietary in any way. The next day the company's website is defaced as part of an SQL injection attack, and the company receives press inquiries about the message the attackers displayed on the website. Which of the following is the FIRST action the company should take?

• A) Refer to and follow procedures from the company's incident response plan.
• B) Call a press conference to explain that the company has been hacked.
• C) Establish chain of custody for all systems to which the systems administrator has access.
• D) Conduct a detailed forensic analysis of the compromised system.
• E) Inform the communications and marketing department of the attack details.

---

Definitions:

Probability

A measure of the likelihood that a particular event will occur, often expressed as a number between 0 and 1, where 0 indicates impossibility and 1 indicates certainty.

Resources

Available assets or supports that can be used to achieve goals or manage demands.

Absenteeism

The habit or practice of being absent from work or duties without a good reason, reflecting negatively on employee reliability and productivity.

Decreased

Reduced in amount, size, extent, or importance.