Câu 184: SY0-501: CompTIA Security+

A Chief Information Security Officer (CISO) has tasked a security analyst with assessing the security posture of an organization and which internal factors would contribute to a security compromise. The analyst performs a walk-through of the organization and discovers there are multiple instances of unlabeled optical media on office desks. Employees in the vicinity either do not claim ownership or disavow any knowledge concerning who owns the media. Which of the following is the MOST immediate action to be taken?

1. A. Confiscate the media and dispose of it in a secure manner as per company policy. — đáp án hiện tại
2. B. Confiscate the media, insert it into a computer, find out what is on the disc, and then label it and return it to where it was found.
3. C. Confiscate the media and wait for the owner to claim it. If it is not claimed within one month, shred it.
4. D. Confiscate the media, insert it into a computer, make a copy of the disc, and then return the original to where it was found.