Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

BCS CISMP-V9 Exam - Topic 1 Question 70 Discussion

Which of the following controls would be the MOST relevant and effective in detecting zero day attacks?
B) Vulnerability assessment
A) Strong OS patch management
C) Signature-based intrusion detection.
D) Anomaly based intrusion detection. https://www.sciencedirect.com/topics/computer-science/zero-day-attack

BCS CISMP-V9 Exam - Topic 1 Question 70 Discussion

Actual exam question for BCS's CISMP-V9 exam
Question #: 70
Topic #: 1
[All CISMP-V9 Questions]

Which of the following controls would be the MOST relevant and effective in detecting zero day attacks?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Elli at Mar 20, 2024, 12:32 AM

Limited Time Offer

25%

Off

Get Premium CISMP-V9 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Bronwyn
9 months ago
Vulnerability assessments are essential too, don’t overlook them!
upvoted 0 times
...
Buck
9 months ago
Really? I’m not convinced anomaly detection is that effective.
upvoted 0 times
...
Lorean
9 months ago
Strong OS patch management is still super important though.
upvoted 0 times
...
Janna
10 months ago
I totally agree, signatures won't catch new threats!
upvoted 0 times
...
Asuncion
10 months ago
Anomaly based intrusion detection is key for zero day attacks.
upvoted 0 times
...
Blair
10 months ago
I recall that anomaly-based detection looks for unusual behavior, which could help identify zero-day attacks, but I wonder if it's always reliable.
upvoted 0 times
...
Craig
10 months ago
I practiced a similar question, and I think strong OS patch management is important, but it might not catch zero-day attacks right away.
upvoted 0 times
...
Sherell
10 months ago
I'm not entirely sure, but I feel like signature-based intrusion detection wouldn't be effective since it relies on known threats.
upvoted 0 times
...
Tambra
11 months ago
I remember studying that zero-day attacks exploit vulnerabilities that are not yet known, so I think anomaly-based detection might be the best option here.
upvoted 0 times
...
Joni
11 months ago
I'm leaning towards the vulnerability assessment option. If we can identify and fix vulnerabilities quickly, that could help minimize the window of opportunity for zero-day exploits. But I'm not 100% sure, so I'll have to think it through some more.
upvoted 0 times
...
Theola
11 months ago
Strong OS patch management is important, but that's more about preventing vulnerabilities from being exploited in the first place. For actually detecting zero-day attacks, I think the anomaly-based option is the best bet.
upvoted 0 times
...
Lisbeth
11 months ago
Anomaly-based intrusion detection seems like the way to go here. Since zero-day attacks are unknown, signature-based detection won't catch them. Anomaly detection might be able to spot suspicious activity even without a known signature.
upvoted 0 times
...
Marci
11 months ago
Hmm, I'm a bit unsure about this. Zero-day attacks are tough to detect, so I'm not sure if any of these options would be the "most" effective. I'll have to weigh the pros and cons of each.
upvoted 0 times
...
Darrin
11 months ago
This is a tricky one. I'll need to think carefully about the differences between the options and which one would be most effective against zero-day attacks.
upvoted 0 times
...
Garry
11 months ago
Hmm, I'm a bit unsure about this one. The options seem similar, and I want to make sure I understand the correct sequence. Let me re-read the question and think it through step-by-step.
upvoted 0 times
...
Ilona
11 months ago
Okay, I've got a strategy here. I'll start by identifying the true statements, then cross-check them against the order of execution and the constraint definitions. Methodical approach is key for these types of questions.
upvoted 0 times
...
Herman
11 months ago
I'm pretty confident about this one. The manager is responsible for overseeing the processes, not doing them directly. So they wouldn't be auditing their own work, which is why option B is the best choice.
upvoted 0 times
...
Carlee
11 months ago
I'm a bit stumped on this one. I know there are a few different protocols that can be used to secure web traffic, but I'm not sure which one would be the best choice for a systems administrator to implement. I'll have to think about this one some more.
upvoted 0 times
...
Victor
2 years ago
That's true, but I still believe patch management is crucial for preventing zero day attacks.
upvoted 0 times
...
Kenda
2 years ago
I see your point, Mauricio. Anomaly based detection can catch unusual behavior that signature-based systems might miss.
upvoted 0 times
...
Mauricio
2 years ago
But wouldn't anomaly based intrusion detection be more effective in detecting unknown threats?
upvoted 0 times
...
Stephane
2 years ago
I agree with Victor, keeping the operating system updated can help prevent zero day attacks.
upvoted 0 times
...
Victor
2 years ago
I think strong OS patch management would be the best option.
upvoted 0 times
...
Lauryn
2 years ago
Candidate 6: I think a combination of strong OS patch management and anomaly based intrusion detection would be the best approach.
upvoted 0 times
...
Alberto
2 years ago
Candidate 5: Signature-based intrusion detection may not be effective against zero day attacks since it relies on known patterns.
upvoted 0 times
...
Dahlia
2 years ago
Candidate 4: Vulnerability assessment can also help identify weaknesses that attackers could exploit.
upvoted 0 times
...
Shannan
2 years ago
Candidate 3: I believe strong OS patch management is crucial as well to prevent vulnerabilities.
upvoted 0 times
...
Gracie
2 years ago
Candidate 2: I agree, anomaly based detection can catch unknown threats like zero day attacks.
upvoted 0 times
...
Aretha
2 years ago
Candidate 1: I think the most relevant control would be anomaly based intrusion detection.
upvoted 0 times
...

Save Cancel