Security Architecture and Engineering
Question #52
Following a spike in abnormal network traffic, you need to provide a report to C-level executives quickly. Which step should you take first to investigate the cause ?
A. Analyze CASB (Cloud Access Security Broker) and firewall logs to identify potential threats.
B. Request a detailed report from your ISP (Internet Service Provider).
C. Review the log data from user workstations to detect linked activity.
D. Examine existing policies and procedures to determine if gaps contributed to the issue.
Domain Concept: Security Architecture and Engineering
This scenario evaluates management-level decision making in Security Architecture and Engineering. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.