CompTIA CASP+ (CAS-003) — Question 159

Ann, a terminated employee, left personal photos on a company-issued laptop and no longer has access to them. Ann emails her previous manager and asks to get her personal photos back.
Which of the following BEST describes how the manager should respond?

Answer options

• A. Determine if the data still exists by inspecting to ascertain if the laptop has already been wiped and if the storage team has recent backups.
• B. Inform Ann that the laptop was for company data only and she should not have stored personal photos on a company asset.
• C. Report the email because it may have been a spoofed request coming from an attacker who is trying to exfiltrate data from the company laptop.
• D. Consult with the legal and/or human resources department and check company policies around employment and termination procedures.

Correct answer: D

Explanation

The correct answer is D because consulting with the legal and/or human resources department ensures that the response aligns with company policies and procedures regarding terminated employees and personal data. Options A and B do not address the necessary legal considerations, while C focuses on potential security threats rather than the appropriate handling of the request.