Discuss CIMA CIMAPRO19-P03-1 Exam Topic 2 Question 36

The Head of IT Security has been asked to conduct a detailed forensic analysis of a suspected data breach that ted to customer credit card details being intercepted.

Which TWO of the following would be suitable objectives for such a forensic analysis?

ARecovering the stolen credit card details before they can be abused by criminals

BDeveloping an understanding of the vulnerabilities that led to the breach

CIdentifying customers whose details have been stolen

DThe collection of evidence that can be used to convict the perpetrators of the breach.

EPreventing the credit card companies from blaming the entity for fraudulent charges

Suggested Answer: B, C

Get Premium CIMAPRO19-P03-1 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Rory 12 months ago

Totally agree with B, understanding vulnerabilities is crucial.

Jaime 12 months ago

Surprised E is even an option, that's not a real objective!

Penney 1 year ago

C is important too, gotta know who was affected.

Lenna 1 year ago

A seems unrealistic, can't recover stolen data like that.

Claudia 1 year ago

Definitely B and D, those are key!

Daniel 1 year ago

I’m a bit confused about the objectives. I thought preventing blame from credit card companies was more of a PR issue than a forensic one, so I’d skip E.

Dean 1 year ago

I practiced a similar question where recovering stolen data was mentioned, but I think that’s more about response than analysis. So, I lean towards B and D.

Arlene 1 year ago

I'm not entirely sure, but I feel like identifying customers whose details have been stolen is crucial too. So maybe option C?

Rosalind 1 year ago

I remember we discussed the importance of understanding vulnerabilities in our last class. I think option B makes a lot of sense for the objectives.

Lonny 1 year ago

I'm a bit confused. Is the company using a cloud-based version of Dynamics 365 Business Central, or is it just looking to print the financial statements using a cloud-based printer? I need to clarify that before I can make a recommendation.

Abraham 1 year ago

I'm feeling confident about this one. The question is asking about the accountant's responsibilities when expressing an opinion on a nonissuer's internal control, and I think option B is the best answer.

Truman 1 year ago

I think the command might be something with "ssl-client-hello-tuning," but I'm not 100% sure.

CIMAPRO19-P03-1 Exam - Topic 2 Question 36 Discussion