Instant Access ISACA.CISM.v2024-08-17.q703 Actual Practice Test Engine for Free (Page 121)

Welcome to DumpsDB

- Passing Exams, Dumps for Free

Request Exam Contact

Home
Popular Exams
- Oracle
- Fortinet
- Juniper
- Microsoft
- Cisco
- Citrix
- CompTIA
- VMware
- ISC
- SAP
- EMC
- PMI
- HP
- Salesforce
View All Exams
New Dumps
Upload

Oracle
Fortinet
Juniper
Microsoft
Cisco
Citrix
CompTIA
VMware
ISC
SAP
EMC
PMI
HP
Salesforce

Home
ISACA Certification
CISM Exam
ISACA.CISM.v2024-08-17.q703 Dumps

««
«
…
116
117
118
119
120
121
122
123
124
125
…
»
»»

Question 596

Which of the following is the MOST important area of focus when examining potential security compromise of a new wireless network?

A.Signal strength
B.Number of administrators
C.Bandwidth
D.Encryption strength

Correct Answer: B

The number of individuals with access to the network configuration presents a security risk. Encryption strength is an area where wireless networks tend to fall short; however, the potential to compromise the entire network is higher when an inappropriate number of people can alter the configuration. Signal strength and network bandwidth are secondary issues.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 597

Which of the following is the BEST way to reduce the risk of security incidents from targeted email attacks?

A.Implement a data loss prevention (DLP) system
B.Disable all incoming cloud mail services
C.Conduct awareness training across the organization
D.Require acknowledgment of the acceptable use policy

Correct Answer: C

Explanation
Conducting awareness training across the organization is the best way to reduce the risk of security incidents from targeted email attacks because it helps to educate and empower the employees to recognize and avoid falling for such attacks. Targeted email attacks, such as phishing, spear phishing, or business email compromise, rely on social engineering techniques to deceive and manipulate the recipients into clicking on malicious links, opening malicious attachments, or disclosing sensitive information. Awareness training can help to raise the level of security culture and behavior among the employees, as well as to provide them with practical tips and best practices to protect themselves and the organization from targeted email attacks.
Therefore, conducting awareness training across the organization is the correct answer.
References:
* https://almanac.upenn.edu/articles/one-step-ahead-dont-get-caught-by-targeted-email-attacks
* https://www.microsoft.com/en-us/security/business/security-101/what-is-business-email-compromise-bec
* https://www.csoonline.com/article/3334617/what-is-spear-phishing-examples-tactics-and-techniques.html

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 598

Which of the following is a viable containment strategy for a distributed denial of service (DDoS) attack?

A.Block IP addresses used by the attacker
B.Redirect the attacker's traffic
C.Disable firewall ports exploited by the attacker.
D.Power off affected servers

Correct Answer: B

Redirecting the attacker's traffic is a viable containment strategy for a distributed denial of service (DDoS) attack because it helps to divert the malicious traffic away from the target server and reduce the impact of the attack. A DDoS attack is an attempt by attackers to overwhelm a server or a network with a large volume of requests or packets, preventing legitimate users from accessing the service or resource. Redirecting the attacker's traffic is a technique that involves changing the DNS settings or routing tables to send the attacker's traffic to another destination, such as a sinkhole, a honeypot, or a scrubbing center. A sinkhole is a server that absorbs and discards the malicious traffic. A honeypot is a decoy server that mimics the target server and collects information about the attacker's behavior and techniques. A scrubbing center is a service that filters out the malicious traffic and forwards only the legitimate traffic to the target server. Redirecting the attacker's traffic helps to contain the DDoS attack by reducing the load on the target server and preserving its availability and performance. Therefore, redirecting the attacker's traffic is the correct answer.
Reference:
https://www.fortinet.com/resources/cyberglossary/implement-ddos-mitigation-strategy
https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-response-strategy
https://www.cloudflare.com/learning/ddos/glossary/sinkholing/.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 599

Information security projects should be prioritized on the basis of:

A.time required for implementation.
B.impact on the organization.
C.total cost for implementation.
D.mix of resources required.

Correct Answer: B

Explanation/Reference:
Explanation:
Information security projects should be assessed on the basis of the positive impact that they will have on the organization. Time, cost and resource issues should be subordinate to this objective.

Comment: *

Name: *

Email: *

Verification: *

insert code

Question 600

Which of the following would be MOST helpful in gaming support for a business case for an Information security initiative9

A.Demonstrating organizational alignment
B.Presenting a solution comparison matrix
C.Referencing control deficiencies
D.Emphasizing threats to the organization

Correct Answer: A

Comment: *

Name: *

Email: *

Verification: *

insert code

««
«
…
116
117
118
119
120
121
122
123
124
125
…
»
»»

[×]

Download PDF File

Enter your email address to download ISACA.CISM.v2024-08-17.q703 Dumps

Email:

We are the Largest and the most Updated website for all vendors Certification Exam materials around the world.

Using resources of we provide, we strive using dumps to strengthen the community of High level Certification professionals for free.

DMCA
About
Contact Us
Privacy Policy
Terms & Conditions

©2026 DumpsDB

www.dumpsdb.com materials do not contain actual questions and answers from Cisco's certification exams.

Web Analytics