Which of the following corporate policies is used to help prevent employee fraud and to detect system log modifications or other malicious activity based on tenure?

Which of the following incident response steps occurs before containment?

An attacker is trying to gain access by installing malware on a website that is known to be visited by the target victims. Which of the following is the attacker MOST likely attempting?

After a phishing scam for 9 user's credentals, the red team was able to craft a payload to deploy on @ server. The attack allowed the installaton of malicious software that intiates @ new remote session.
Which of the following types of attacks has occurred?

A technician enables full disk encryption on a laptop that will be taken on a business tnp. Which of the following does this process BEST protect?