A Copy of a Highly Confidential Salary Report Was Recently

question 1076

Multiple Choice

A copy of a highly confidential salary report was recently found on a printer in the IT department. The human resources department does not have this specific printer mapped to its devices, and it is suspected that an employee in the IT department browsed to the share where the report was located and printed it without authorization. Which of the following technical controls would be the BEST choice to immediately prevent this from happening again?

• A) Implement a DLP solution and classify the report as confidential, restricting access only to human resources staff
• B) Restrict access to the share where the report resides to only human resources employees and enable auditing
• C) Have all members of the IT department review and sign the AUP and disciplinary policies
• D) Place the human resources computers on a restricted VLAN and configure the ACL to prevent access from the IT department

---

Definitions:

Other Comprehensive Income

Revenues, expenses, gains, and losses that are not included in net income, but affect shareholders' equity.

Unrealized Loss

A decline in worth due to the possession of an asset that has depreciated in value, yet remains unsold.

Net Income

The total profit of a company after all expenses, including taxes and operating costs, are subtracted from total revenue.

Dividends Paid

The portion of a company's earnings distributed to shareholders as a reward for their investment.