New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GSNA Exam - Topic 1 Question 23 Discussion

Actual exam question for GIAC's GSNA exam
Question #: 23
Topic #: 1
[All GSNA Questions]

You are the Security Administrator for an Internet Service Provider. From time to time your company gets subpoenas from attorneys and law

enforcement for records of customers' access to the internet. What policies must you have in place to be prepared for such requests?

Show Suggested Answer Hide Answer
Suggested Answer: D

Storage and retention policies will determine how long you keep records (such as records of customers Web activity), how you will store them,

and how you will dispose of them. This will allow you to know what records you should still have on hand should a legal request for such

records come in.

Answer C is incorrect. User policies might determine what a customer has access to, but won't help you identify what they actually did

access.

Answer A is incorrect. Group policies are usually pertinent to network administration, not the open and uncontrolled environment of an

ISP.

Answer B is incorrect. Backup policies dictate how data is backed up and stored.


Contribute your Thoughts:

0/2000 characters
Emiko
4 months ago
Wait, do we really have to keep records for that long?
upvoted 0 times
...
Roy
4 months ago
Agreed, but what about group access policies?
upvoted 0 times
...
Nu
4 months ago
Backup policies? Not sure how that helps with subpoenas.
upvoted 0 times
...
Darell
4 months ago
I think user access policies are crucial too.
upvoted 0 times
...
Essie
5 months ago
Definitely need storage and retention policies!
upvoted 0 times
...
Tenesha
5 months ago
I recall a practice question that emphasized the importance of storage and retention policies for handling subpoenas effectively.
upvoted 0 times
...
Colette
5 months ago
Backup policies might be relevant too, but I feel like they’re more about data recovery than legal requests.
upvoted 0 times
...
Shannan
5 months ago
I'm not entirely sure, but I remember something about user access policies being important for compliance.
upvoted 0 times
...
Essie
5 months ago
I think we definitely need storage and retention policies in place to manage how long we keep customer data for legal requests.
upvoted 0 times
...
Shenika
5 months ago
I'm feeling confident about this one. Exploratory testing is the way to go - it'll let us test effectively without a complete test basis, which is crucial for the "Bonus Program."
upvoted 0 times
...
Viki
5 months ago
This seems like a pretty straightforward question. I'd start by checking if any pop-up blocking software is enabled, either in the operating system or the web browser.
upvoted 0 times
...
Dottie
5 months ago
This question seems straightforward, but I want to make sure I understand the details before selecting my answers.
upvoted 0 times
...
Franklyn
5 months ago
Hmm, I'm not entirely sure about this one. I'll need to think it through and consider the different options before selecting an answer.
upvoted 0 times
...

Save Cancel