Certified Incident Handler (ECIH v3) — Question 1
Insiders may be:
Answer options
- A. Ignorant employees
- B. Carless administrators
- C. Disgruntled staff members
- D. All the above
Correct answer: D
Explanation
The correct answer is D because insiders can indeed come from any of these categories, including ignorant employees, careless administrators, and disgruntled staff members. Each of these groups may pose a risk to security from within an organization.