GIAC Certified Forensic Analyst (GCFA) — Question 24

Mark works as a security manager for SofTech Inc. He is using a technique for monitoring what the employees are doing with corporate resources. Which of the following techniques is being used by Mark to gather evidence of an ongoing computer crime if a member of the staff is e-mailing company's secrets to an opponent?

Answer options

• A. Electronic surveillance
• B. Civil investigation
• C. Physical surveillance
• D. Criminal investigation

Correct answer: A

Explanation

The correct answer is A, Electronic surveillance, as it specifically involves monitoring electronic communications to detect unauthorized sharing of information. Options B and D, Civil investigation and Criminal investigation, refer to processes that typically occur after evidence has been gathered, while C, Physical surveillance, pertains to monitoring individuals in a physical space rather than their electronic activities.