MENU
An insider threat response plan helps an organization minimize the damage caused by malicious insiders. One of the approaches to mitigate these threats is setting up controls from the human resources department. Which of the following guidelines can the human resources department use?
Suggested Answer: A
Get Premium 212-89 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
44 comments · newest first
AL
Aleta
11 months ago
Wait, are we really trusting HR with all this?
SO
Socorro
11 months ago
B makes sense, accountability is key!
RU
Ruby
11 months ago
D is crucial! Can't overlook physical security.
GL
Gladys
11 months ago
Disabling the default admin account? Seems a bit extreme.
AN
Annmarie
12 months ago
A is a solid guideline, definitely need supervisor vetting!
GE
Georgene
12 months ago
I feel like option D is important too, especially since physical security ties into insider threats, but I’m not clear on how HR would implement that.
FE
Felton
1 year ago
Option C sounds familiar, but I can't recall if the person-to-person rule is specifically an HR guideline or more of a general security practice.
AR
Aretha
1 year ago
I remember discussing the importance of disabling default accounts in class, so option B seems relevant, but I wonder if it’s enough on its own.
GE
German
1 year ago
I think option A makes sense because documenting access can help track who has permissions, but I'm not entirely sure if that's the only thing HR should focus on.
MA
Marleen
1 year ago
Hmm, I'm a little unsure about this one. The question mentions a "participative evaluation" but I'm not sure if that's the same as a 360-degree evaluation. I'll have to think this through carefully.
GE
Gerardo
1 year ago
This seems like a straightforward question about handling multiple assets on a customer's account. I think the key is to find a way to manage each container independently, so that the service for each one can be handled separately.
CA
Carma
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to carefully review the options and think through the pros and cons of each approach. The question is asking for specific advantages, so I'll need to make sure I address that directly.
OZ
Ozell
1 year ago
Wait, the HR department is responsible for insider threat response? I thought that was the IT team's job. Maybe they should just stick to hiring and firing people.
PA
Patrick
1 year ago
It's important for HR to collaborate with IT to ensure a comprehensive insider threat response plan.
TI
Timothy
1 year ago
HR can provide training on security policies and procedures to all employees.
RO
Rosamond
1 year ago
They can also monitor employee behavior and report any suspicious activity to the IT team.
HE
Henriette
1 year ago
HR department can help by conducting thorough background checks on new hires.
CA
Casandra
1 year ago
Monitoring and securing the physical environment? That's the easy part. The real challenge is keeping the HR team from accidentally locking themselves out of the building.
LA
Laurena
1 year ago
A person-to-person rule for the backup process? That's just asking for trouble. What if the person in charge of backups decides to go rogue? Not a great idea.
AM
Amina
1 year ago
C) Implement a person-to-person rule to secure the backup process and physical media.
FE
Felix
1 year ago
B) Disable the default administrative account to ensure accountability.
RA
Raylene
1 year ago
A) Access granted to users should be documented and vetted by a supervisor.
PA
Pamella
1 year ago
Disabling the default administrative account? Hmm, that seems a bit overkill for an HR department. But I guess it could work if they're really paranoid.
CL
Cletus
1 year ago
C) Implement a person-to-person rule to secure the backup process and physical media.
IN
Inocencia
1 year ago
B) Disable the default administrative account to ensure accountability.
DE
Desiree
1 year ago
A) Access granted to users should be documented and vetted by a supervisor.
RI
Rikki
1 year ago
C) Implement a person-to-person rule to secure the backup process and physical media.
RO
Rolland
1 year ago
B) Disable the default administrative account to ensure accountability.
LO
Louis
1 year ago
A) Access granted to users should be documented and vetted by a supervisor.
ST
Stefania
1 year ago
Access granted to users should definitely be documented and vetted by a supervisor. It's a simple and effective way to mitigate insider threats.
BR
Britt
1 year ago
D) Monitor and secure the organization's physical environment.
IV
Ivory
1 year ago
C) Implement a person-to-person rule to secure the backup process and physical media.
MA
Markus
1 year ago
B) Disable the default administrative account to ensure accountability.
AL
Alethea
1 year ago
A) Access granted to users should be documented and vetted by a supervisor.
AR
Armanda
1 year ago
D) Monitor and secure the organization's physical environment.
ED
Edna
1 year ago
C) Implement a person-to-person rule to secure the backup process and physical media.
KI
Kimbery
1 year ago
B) Disable the default administrative account to ensure accountability.
KA
Kathryn
1 year ago
A) Access granted to users should be documented and vetted by a supervisor.
RA
Raylene
1 year ago
I believe option D is also important, monitoring the physical environment can help prevent insider threats.
CH
Chantell
1 year ago
I agree with Rory, documenting and vetting access is crucial for security.
RO
Rory
1 year ago
I think option A is a good guideline for HR to use.
FR
Francisca
1 year ago
I believe option D is also important, monitoring the physical environment can help prevent insider threats.
TA
Tamala
2 years ago
I agree with Sherell, documenting and vetting access is crucial for security.
SH
Sherell
2 years ago
I think option A is a good guideline for HR to use.