CompTIA CASP+ Practice Test

Which action is NOT an appropriate response to a cybersecurity incident involving unauthorized access?

1. Conduct a thorough investigation

2. Notify affected parties immediately

3. Provide user training after the incident

4. Ignore the incident if it was contained

The correct answer is: Ignore the incident if it was contained

The appropriate response to a cybersecurity incident involving unauthorized access requires careful consideration of all stakeholders and the potential implications of the breach. Ignoring the incident, even if it seems to be contained, is not acceptable because doing so can jeopardize the security of the system and the data it holds. Cybersecurity incidents can have cascading effects; what appears contained at first may develop into a more serious situation if not properly addressed. It is essential to investigate thoroughly to understand the nature and extent of the breach, to notify parties affected in order to mitigate risks and assist in any necessary remediation, and to implement user training to prevent future incidents. Each of these responses acknowledges the reality of the incident and promotes a culture of awareness and preparedness within the organization. Effective incident response not only protects current information but also enhances overall security posture going forward.