1.5 - Understand Requirements for Investigation Types (i.e., Administrative, Criminal, Civil, Regulatory, Industry Standards) CISSP Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which legal or ethical consideration is most relevant when conducting an administrative investigation?

   • AThe requirement for a search warrant
   • BEmployee privacy rights
   • CThe right to a jury trial
   • DThe burden of proof beyond a reasonable doubt
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A customer is suing a company for damages after a data breach exposed their personal information. The company's legal team is gathering evidence to defend against the lawsuit. Which investigation type does this represent, and what is the applicable burden of proof?

   • ACivil investigation; preponderance of the evidence
   • BCriminal investigation; beyond a reasonable doubt
   • CRegulatory investigation; clear and convincing evidence
   • DAdministrative investigation; preponderance of the evidence
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which scenario best describes an administrative investigation?

   • AA police department collects evidence to charge an employee with theft
   • BA court hears a lawsuit between two businesses over a contract dispute
   • CA company investigates an employee's violation of its acceptable use policy
   • DA regulatory agency audits a bank for compliance with financial regulations
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A financial institution is under a regulatory investigation for potential anti-money laundering (AML) violations. The regulator requests a large volume of transaction records. The security team is also conducting an internal investigation into a related employee's conduct. What is the most important consideration for the security team when responding to the regulator's request?

   • ARefuse to provide the records until the internal investigation is complete
   • BProvide the records immediately without review to show cooperation
   • CCoordinate with legal counsel to ensure the response complies with privacy and data protection laws
   • DProvide only the records that support the company's position
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security analyst is collecting evidence for a civil lawsuit. The evidence is stored on a server that is also used for ongoing business operations. The analyst needs to preserve the evidence without disrupting operations. What is the most appropriate approach?

   • ACreate a forensic image of the relevant data while the server remains online
   • BCopy the relevant files to a USB drive and store it in a safe
   • CTake the server offline immediately to preserve the evidence
   • DWait until the lawsuit is over to collect the evidence
   Reveal Solution Discussion Select an answer first