Diplomatic Security Special Agent (DSSAT) Practice Exam

If you suspect your government laptop was compromised during an overseas trip, what should you do?

Continue using it and monitor for unusual activity. Turn it off and delete sensitive data from the device. Bring it to IT security after you return to your home country. Stop using it immediately and report to the RSO and IT security.

Correct Answer:

Stop using it immediately and report to the RSO and IT security.

Explanation:

Immediate containment and proper reporting are essential when you suspect a compromise. The best course is to stop using the device right away and report to both the RSO (Regional Security Office) and IT security. This allows rapid isolation of the laptop, preservation of evidence, and a coordinated incident-response effort to determine scope, revoke compromised credentials, and remediate the risk. Continuing to use the laptop or deleting data can worsen the breach or destroy evidence, and waiting until you return home delays containment and investigation. The RSO handles security escalation and coordination, while IT security conducts the technical analysis and remediation needed to restore a secure posture.

Access more questions from this quiz

Continue to Diplomatic Security Special Agent (DSSAT) Practice Exam for more practice questions and the full quiz experience.

Access More Questions