🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 5 hours remaining!

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

While reviewing CloudTrail and VPC Flow Logs in response to suspected source-code theft from an Amazon EC2 bastion host, your security team is told that management intends to handle the matter as an internal disciplinary (administrative) action rather than involving law enforcement. From a U.S. legal-standards perspective, which burden of proof must the organization generally satisfy to justify sanctions against the employee, and why is that burden appropriate?

  • Clear and convincing evidence, because employment actions require a heightened level of proof above a simple balance of probabilities.

  • Probable cause, because the organization must satisfy the same threshold used to obtain a search warrant from law enforcement.

  • Preponderance of the evidence, because administrative investigations only need to show that the allegation is more likely true than not.

  • Beyond a reasonable doubt, because any employee misconduct must meet the standard used in criminal courts.

ISC2 Systems Security Certified Practitioner (SSCP)
Incident Response and Recovery
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot