Asset Security
Question #51
As a new CISO, you find several retired hard disks in the server room containing sensitive data in plaintext. What steps will you take first?
A. Inform the C-levels and write a Data Protection Policy
B. Encrypt the HDD and ask for the existing Data Protection Policies
C. Inform the C-levels and write a Data Remanence Policy
D. Protect physically the server room and implement administrative deterrent countermeasures
Domain Concept: Asset Security
This scenario evaluates management-level decision making in Asset Security. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.