CompTIA CySA+ (CS0-002) — Question 316
A manager asks a security analyst to provide the web-browsing history of an employee. Which of the following should the analyst do first?
Answer options
- A. Obtain permission to perform the search.
- B. Obtain the web-browsing history from the proxy.
- C. Obtain the employee’s network ID to form the query.
- D. Download the browsing history, encrypt it, and hash it.
Correct answer: A
Explanation
The correct first step is to obtain permission to perform the search, as accessing an employee's web-browsing history may involve legal and privacy concerns. Without the necessary authorization, actions like retrieving the history from the proxy, gathering the employee's network ID, or downloading and encrypting the data would be inappropriate and potentially unlawful.