Which of the following actions or rules should be implemented to prevent this incident from reoccurring?

A cybersecurity analyst is reviewing Apache logs on a web server and finds that some logs are missing. The analyst has identified that the systems administrator accidentally deleted some log files. Which of the following actions or rules should be implemented to prevent this incident from reoccurring?
A. Personnel training
B. Separation of duties
C. Mandatory vacation
D. Backup server

CS0-002: CompTIA CySA+ Exam

FULL Printable PDF and Software. VALID exam to help you PASS.

comptia-exams

3 thoughts on “Which of the following actions or rules should be implemented to prevent this incident from reoccurring?

  1. Personnel training would not prevent this from reoccurring.
    Backups is a mitigation solution and does not help in preventing this again.

    Most feasible solution is B – Separation of Duties

Leave a Reply

Your email address will not be published. Required fields are marked *


The reCAPTCHA verification period has expired. Please reload the page.