Cisco Exam 350-201 Topic 12 Question 61 Discussion

Actual exam question for Cisco's 350-201 exam

Question #: 61
Topic #: 12

A patient views information that is not theirs when they sign in to the hospital's online portal. The patient calls the support center at the hospital but continues to be put on hold because other patients are experiencing the same issue. An incident has been declared, and an engineer is now on the incident bridge as the CyberOps Tier 3 Analyst. There is a concern about the disclosure of PII occurring in real-time. What is the first step the analyst should take to address this incident?

AEvaluate visibility tools to determine if external access resulted in tampering

BContact the third-party handling provider to respond to the incident as critical

CTurn off all access to the patient portal to secure patient records

DReview system and application logs to identify errors in the portal code

Show Suggested Answer

Suggested Answer: A

by Elly at Nov 21, 2022, 05:31 PM

Limited Time Offer

25%

Off

Get Premium 350-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Antonio

21 days ago

I hope the CyberOps team has their caffeine on standby. This sounds like the kind of incident that's going to keep them up all night. But hey, at least they get to play with all the fancy security tools, right?

upvoted 0 times

...

Sharen

22 days ago

I'm going with D. Gotta get to the bottom of those pesky portal bugs before anything else. And maybe throw in a little dance party to lighten the mood, you know, for morale.

upvoted 0 times

Suzi

2 days ago

User 2: Yeah, that sounds like a good idea. Let's see if there was any tampering.

upvoted 0 times

...

Adolph

3 days ago

User 1: I think we should go with A, check for external access first.

upvoted 0 times

...

Ernest

25 days ago

Wow, this is a tough one. I bet the engineers are really sweating right now. I hope they have a good plan to get this fixed without causing too much chaos.

upvoted 0 times

...

Nell

30 days ago

I'm not so sure about that. Disabling the portal could cause more disruption to patient care. Reviewing the logs to identify the root cause seems like a better first step.

upvoted 0 times

...

Jade

2 months ago

I think turning off all access to the patient portal to secure patient records should be the first step to prevent further disclosure of PII.

upvoted 0 times

...

Gianna

2 months ago

I agree with Dannette. It's important to identify the source of the issue before taking any further action.

upvoted 0 times

...

Dannette

2 months ago

I think the first step should be to evaluate visibility tools to determine if external access resulted in tampering.

upvoted 0 times

...

Art

2 months ago

I think the correct answer is C. Shutting down the portal is the quickest way to secure patient records and prevent further unauthorized access.

upvoted 0 times

Billi

17 days ago

D: Reviewing system and application logs might help identify errors in the portal code.

upvoted 0 times

...

Leota

22 days ago

C: Turning off all access to the patient portal could help secure patient records quickly.

upvoted 0 times

...

Andra

24 days ago

B: Contacting the third-party provider might be a good idea to respond to the incident.

upvoted 0 times

...

Pearlie

1 months ago

A: I think we should evaluate visibility tools first to see if there was external access.

upvoted 0 times

...