1.5 - Understand Requirements for Investigation Types (i.e., Administrative, Criminal, Civil, Regulatory, Industry Standards) CISSP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is an example of an industry standards investigation?

   • AA company reviews its payment card processing against PCI DSS requirements
   • BA police department investigates a data breach for criminal charges
   • CA court hears a lawsuit over a breach of contract
   • DA government agency audits a company for environmental compliance
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security manager is asked to classify an investigation that was triggered by a customer complaint about a billing error. The company wants to determine if it violated its own service-level agreements and whether to issue a refund. Which investigation type does this represent?

   • AIndustry standards investigation
   • BAdministrative investigation
   • CCivil investigation
   • DRegulatory investigation
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   During an administrative investigation, a security analyst discovers evidence that also indicates a possible crime. The analyst is asked by the internal investigator to keep the finding confidential and not report it. What is the analyst's most appropriate course of action?

   • AShare the evidence with the employee's manager to warn them
   • BReport the potential crime to law enforcement or through the appropriate legal channel
   • CDelete the evidence to protect the company from liability
   • DComply with the internal investigator's request to avoid disrupting the administrative process
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which investigation type is conducted by law enforcement to gather evidence for the prosecution of alleged crimes?

   • AAdministrative investigation
   • BCivil investigation
   • CCriminal investigation
   • DRegulatory investigation
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A security professional is assisting a criminal investigation by providing access logs from a company server. The logs are stored in a different country than where the investigation is taking place. What is the most important legal consideration?

   • AThe logs must be deleted after the investigation
   • BThe logs must be translated into the local language
   • CThe logs may be subject to data protection laws in the country where they are stored
   • DThe logs must be encrypted before being shared
   Reveal Solution Discussion Select an answer first