CySA+ CS0-001 – Q. 006


A system administrator who was using an account with elevated privileges deleted a large number of log files generated by a virtual hypervisor in order to free up disk space. These log files are needed by the security team to analyze the health of the virtual machines. Which of the following compensating controls would help prevent this from reoccurring? (Select two.)

 Succession planning
B. Separation of duties
C. Mandatory vacation
D. Personnel training
E. Job rotation