CompTIA Security+ (SY0-601) — Question 788

A company recently moved sensitive videos between on-premises, company-owned websites. The company then learned the videos had been uploaded and shared to the Internet. Which of the following would MOST likely allow the company to find the cause?

Answer options

• A. Checksums
• B. Watermarks
• C. Order of volatility
• D. A log analysis
• E. A right-to-audit clause

Correct answer: D

Explanation

A log analysis would provide detailed records of access and actions taken on the videos, helping to trace how they were shared online. Checksums and watermarks are useful for integrity and tracking ownership, respectively, but they do not directly reveal the actions taken that led to the videos being shared. The order of volatility pertains to data retention rather than incident tracing, and a right-to-audit clause does not provide immediate insights into the incident.