Information Technology Specialist (ITS) Cybersecurity Practice Exam

As a cybersecurity analyst, for which reasons should you escalate the report of a stolen laptop to CSIRT?

1. Potential network disruption, exposure of sensitive information, unauthorized use of resources

2. Physical theft, user negligence, equipment malfunction

3. Loss of productivity, employee dissatisfaction, system updates

4. Data loss, hardware failure, software updates

The correct answer is: Potential network disruption, exposure of sensitive information, unauthorized use of resources

Escalating the report of a stolen laptop to the Computer Security Incident Response Team (CSIRT) is crucial due to several factors that align with the potential risks posed by the loss of such a device. When a laptop is stolen, it may contain sensitive information or access credentials that could be exploited by unauthorized individuals. This exposure can lead to significant network disruption, especially if the device was connected to critical infrastructure or holds access to sensitive systems. The unauthorized use of resources is another significant concern because the thief might use the laptop to access corporate networks or data. If the device has any backdoor access or unaddressed vulnerabilities, it could facilitate further attacks or data breaches. The CSIRT is equipped to respond to these threats, evaluate the extent of the data exposure, and implement necessary measures to safeguard the organization from potential fallout. In contrast, the other options present reasons that either do not apply to the urgency of a cybersecurity incident or focus on non-critical issues. Physical theft and user negligence could be hazardous but do not inherently carry the same implications for the organization's cybersecurity posture as data exposure. Loss of productivity and employee dissatisfaction, as mentioned in another choice, are important to consider, but they don't encapsulate the immediate security risks that necessitate CSIRT involvement