MENU
You are the Chief Information Security Officer of a large, multinational bank and you suspect there is a flaw in a two factor authentication token management process. Which of the following represents your BEST course of action?
Suggested Answer: D
Get Premium 712-50 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
35 comments · newest first
BR
Brinda
11 months ago
Definitely B! We need to know the full scope of the issue first.
GI
Gilbert
11 months ago
Wow, I can't believe D is even an option! Sounds risky.
ER
Ernest
11 months ago
C is key for accountability in security processes.
BO
Bok
12 months ago
Not sure about that, A seems important too for awareness.
KE
Kenny
12 months ago
I think B is the best choice. A thorough risk assessment is crucial.
CH
Chantell
1 year ago
Sending a report to executives seems like a good idea, but I wonder if that could cause unnecessary panic without first assessing the risk.
MA
Maricela
1 year ago
I feel like validating the security awareness program is important too, but it might not be the most urgent step right now.
LA
Latosha
1 year ago
I think option B makes the most sense since it directly addresses the potential flaw in the authentication process.
TE
Tequila
1 year ago
I remember we discussed the importance of risk assessments in class, but I'm not sure if that's the best immediate action here.
AS
Ashton
1 year ago
This is a sensitive situation, so I'd want to make sure I involve the right stakeholders and follow proper protocols. Determining program ownership and implementing compensating controls seems like the safest bet.
KI
Kirk
1 year ago
Okay, I think I've got a good handle on this. I'd start by conducting a thorough risk assessment to really understand the scope of the issue and the potential impact.
VI
Virgie
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to review the details and make sure I understand the context before deciding on the best course of action.
LE
Leah
1 year ago
This looks like a tricky one. I'll need to carefully consider the options and think through the potential consequences of each approach.
SC
Scarlet
1 year ago
This looks like a straightforward requirements engineering question. I'll carefully read through the options and think about which one best captures the definition of traceability.
ME
Meghan
1 year ago
I'm a bit confused by the options here. I know there are various risk tracking tools, but I'm not sure I can confidently distinguish between a Risk Burnup, Burndown, Progress, and Tracking chart. I'll have to review my notes on this.
DE
Deeanna
1 year ago
I bet the correct answer involves a secret handshake and a decoder ring. You know, the standard CISO protocol.
KA
Karl
1 year ago
Option A? Really? Updating the security awareness program? That's like putting a band-aid on a bullet wound.
DI
Diane
1 year ago
C) Determine program ownership to implement compensating controls
ME
Mee
1 year ago
B) Conduct a thorough risk assessment against the current implementation to determine system functions
AS
Ashton
1 year ago
A) Validate that security awareness program content includes information about the potential vulnerability
AR
Ariel
1 year ago
Hmm, option D looks good to me. Reporting it to the execs and business owners will get the ball rolling quickly.
OC
Octavio
1 year ago
Once we have a clear understanding of the risks, then we can report it to the executive peers and business unit owners.
LE
Leigha
1 year ago
Agreed, we need to make sure we have all the information before escalating to the executives.
SH
Shantay
1 year ago
I think we should also consider conducting a risk assessment to understand the potential impact.
SA
Salome
2 years ago
I'd go with option C. Determining program ownership and implementing compensating controls is the prudent approach here.
KR
Kristofer
1 year ago
Let's make sure we assign responsibility for implementing those controls.
CH
Chuck
1 year ago
Implementing compensating controls will help mitigate the potential vulnerability.
CH
Christiane
1 year ago
Agreed, determining program ownership is crucial in this situation.
DY
Dyan
1 year ago
I think option C is the best course of action.
CA
Carline
2 years ago
Sending a report to executive peers and business unit owners could also be important to raise awareness.
SH
Shonda
2 years ago
I agree with Johnetta, we need to determine the potential risks before taking any action.
TH
Theola
2 years ago
Option B! Conducting a thorough risk assessment is the way to go. Gotta get all the facts before taking any action.
FR
Francesco
1 year ago
Agreed, it's important to have a clear understanding of the risks involved before making any decisions.
OZ
Ozell
1 year ago
Option B! Conducting a thorough risk assessment is the way to go. Gotta get all the facts before taking any action.
JO
Johnetta
2 years ago
I think the best course of action is to conduct a thorough risk assessment.