An organization is conducting a post-incident review to determine the root cause of an information security incident. Which of the following situations would be
MOST harmful to this investigation?

A. Unencrypted logs of the affected systems were saved on magnetic tapes.

B. Antivirus signature update processes failed on the affected systems.

C. Systems logs were cleared by the administrator to free up space on the affected systems.

D. The incident response plan has not been updated during the past year.








 

Suggested Answer: C



This question is in CISM exam 
For getting Certified Information Security Manager Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by ISACA.
The website does not contain actual questions and answers from ISACA's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to ISACA.