MENU
An attacker embedded a macro within a word processing file opened by a user in an organization's legal department. The attacker used this technique to gain access to confidential financial dat
a. Which two recommendations should a security expert make to mitigate this type of attack? (Choose two.)
Suggested Answer: A
Get Premium 300-215 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
32 comments · newest first
EV
Evangelina
11 months ago
Removable device restrictions could also play a role, right?
AL
Allene
11 months ago
Agreed, but I’m not sure if firewall rules would help here.
MA
Marcelle
11 months ago
Wait, can macros really do that? Sounds sketchy.
MI
Misty
11 months ago
I think controlled folder access is a must too.
TA
Tamie
12 months ago
Definitely signed macro requirements!
LA
Larue
12 months ago
Removable device restrictions might not directly address macros, but they could help prevent other types of attacks, right?
BA
Barabara
1 year ago
I feel like we practiced a question similar to this, and I think firewall rules creation was more about network traffic than file access.
HA
Harrison
1 year ago
I'm not entirely sure, but I think controlled folder access could help limit what files macros can access.
LI
Lindsay
1 year ago
I remember we discussed signed macro requirements in class; it seems like a solid way to prevent unauthorized macros from running.
NU
Nu
1 year ago
I feel pretty confident about this one. Signed macro requirements and removable device restrictions are the two recommendations I would make. Controlling macros and limiting access to external devices should help mitigate this type of attack.
FR
Francine
1 year ago
Firewall rules and network access control seem like they could be good options, but I'm not sure if they're the most effective for this specific scenario. I'll have to review the details again to make sure I'm choosing the right recommendations.
DY
Dylan
1 year ago
Okay, I've got this. The two recommendations I would make are signed macro requirements and controlled folder access. That should help prevent this type of attack by restricting macros and limiting access to sensitive data.
PE
Pearline
1 year ago
Hmm, I'm a bit unsure about this one. There are a few options here, but I'm not sure which two would be the best recommendations. I'll have to think it through carefully.
WE
Weldon
1 year ago
This seems like a straightforward question about mitigating macro-based attacks. I think the key is to focus on restricting access and controlling macros.
CL
Clement
1 year ago
Ah, the age-old battle between security and convenience. Might as well just unplug the whole organization and call it a day.
VO
Vonda
1 year ago
D: True, but in this case, security should definitely take precedence.
DE
Destiny
1 year ago
C: It's always a balance between security and convenience.
DO
Donte
1 year ago
B: Agreed, those would definitely help prevent this type of attack.
MA
Markus
1 year ago
A: controlled folder access and signed macro requirements.
EL
Elliott
1 year ago
Signed macro requirements? Isn't that just a fancy way of saying, 'No more fun macros for you'? I bet the legal department is gonna love that one.
JU
Justine
1 year ago
Firewall rules creation? Really? That's like putting a Band-Aid on a bullet wound. C'mon, security experts, give us something a little more practical.
LE
Lettie
1 year ago
A: How about implementing controlled folder access and signed macro requirements?
CL
Clorinda
1 year ago
B: Yeah, we need more advanced solutions to prevent these types of attacks.
KA
Kati
1 year ago
A: I agree, firewall rules creation seems like a basic measure.
JU
Judy
1 year ago
Controlled folder access and signed macro requirements? Sounds like a security nerd's dream come true. I bet the legal department is just thrilled about that.
KA
Karima
1 year ago
Signed macro requirements is definitely the way to go. Gotta keep those macros in check, you know? And removable device restrictions - can't have those pesky flash drives spreading malware around.
ER
Erinn
1 year ago
Agreed, those two recommendations can really help prevent attacks like this from happening again.
AL
Alesia
1 year ago
Removable device restrictions are crucial. We need to control what devices can be connected.
RU
Ruby
1 year ago
Signed macro requirements is a must. We can't risk unauthorized macros running.
BR
Brett
2 years ago
Firewall rules creation could also help prevent such attacks.
KR
Kristin
2 years ago
I agree, we should also enforce signed macro requirements.
DE
Derrick
2 years ago
We need to implement controlled folder access.