MENU
Which of the following controls would be the MOST relevant and effective in detecting zero day attacks?
Suggested Answer: B
Get Premium CISMP-V9 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
29 comments · newest first
BR
Bronwyn
11 months ago
Vulnerability assessments are essential too, don’t overlook them!
BU
Buck
11 months ago
Really? I’m not convinced anomaly detection is that effective.
LO
Lorean
11 months ago
Strong OS patch management is still super important though.
JA
Janna
11 months ago
I totally agree, signatures won't catch new threats!
AS
Asuncion
11 months ago
Anomaly based intrusion detection is key for zero day attacks.
BL
Blair
12 months ago
I recall that anomaly-based detection looks for unusual behavior, which could help identify zero-day attacks, but I wonder if it's always reliable.
CR
Craig
12 months ago
I practiced a similar question, and I think strong OS patch management is important, but it might not catch zero-day attacks right away.
SH
Sherell
12 months ago
I'm not entirely sure, but I feel like signature-based intrusion detection wouldn't be effective since it relies on known threats.
TA
Tambra
1 year ago
I remember studying that zero-day attacks exploit vulnerabilities that are not yet known, so I think anomaly-based detection might be the best option here.
JO
Joni
1 year ago
I'm leaning towards the vulnerability assessment option. If we can identify and fix vulnerabilities quickly, that could help minimize the window of opportunity for zero-day exploits. But I'm not 100% sure, so I'll have to think it through some more.
TH
Theola
1 year ago
Strong OS patch management is important, but that's more about preventing vulnerabilities from being exploited in the first place. For actually detecting zero-day attacks, I think the anomaly-based option is the best bet.
LI
Lisbeth
1 year ago
Anomaly-based intrusion detection seems like the way to go here. Since zero-day attacks are unknown, signature-based detection won't catch them. Anomaly detection might be able to spot suspicious activity even without a known signature.
MA
Marci
1 year ago
Hmm, I'm a bit unsure about this. Zero-day attacks are tough to detect, so I'm not sure if any of these options would be the "most" effective. I'll have to weigh the pros and cons of each.
DA
Darrin
1 year ago
This is a tricky one. I'll need to think carefully about the differences between the options and which one would be most effective against zero-day attacks.
GA
Garry
1 year ago
Hmm, I'm a bit unsure about this one. The options seem similar, and I want to make sure I understand the correct sequence. Let me re-read the question and think it through step-by-step.
IL
Ilona
1 year ago
Okay, I've got a strategy here. I'll start by identifying the true statements, then cross-check them against the order of execution and the constraint definitions. Methodical approach is key for these types of questions.
HE
Herman
1 year ago
I'm pretty confident about this one. The manager is responsible for overseeing the processes, not doing them directly. So they wouldn't be auditing their own work, which is why option B is the best choice.
CA
Carlee
1 year ago
I'm a bit stumped on this one. I know there are a few different protocols that can be used to secure web traffic, but I'm not sure which one would be the best choice for a systems administrator to implement. I'll have to think about this one some more.
VI
Victor
2 years ago
That's true, but I still believe patch management is crucial for preventing zero day attacks.
KE
Kenda
2 years ago
I see your point, Mauricio. Anomaly based detection can catch unusual behavior that signature-based systems might miss.
MA
Mauricio
2 years ago
But wouldn't anomaly based intrusion detection be more effective in detecting unknown threats?
ST
Stephane
2 years ago
I agree with Victor, keeping the operating system updated can help prevent zero day attacks.
VI
Victor
2 years ago
I think strong OS patch management would be the best option.
LA
Lauryn
2 years ago
Candidate 6: I think a combination of strong OS patch management and anomaly based intrusion detection would be the best approach.
AL
Alberto
2 years ago
Candidate 5: Signature-based intrusion detection may not be effective against zero day attacks since it relies on known patterns.
DA
Dahlia
2 years ago
Candidate 4: Vulnerability assessment can also help identify weaknesses that attackers could exploit.
SH
Shannan
2 years ago
Candidate 3: I believe strong OS patch management is crucial as well to prevent vulnerabilities.
GR
Gracie
2 years ago
Candidate 2: I agree, anomaly based detection can catch unknown threats like zero day attacks.
AR
Aretha
2 years ago
Candidate 1: I think the most relevant control would be anomaly based intrusion detection.