Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCED Exam - Topic 4 Question 51 Discussion

Which control would BEST help detect a potential insider threat?
C) Multiple scheduled log reviews of all employee access levels throughout the year
A) Mandatory approval process for executive and administrative access requests.
B) Providing the same access to all employees and monitoring sensitive file access.
D) Requiring more than one employee to be trained on each task or job duty.

GIAC GCED Exam - Topic 4 Question 51 Discussion

Actual exam question for GIAC's GCED exam
Question #: 51
Topic #: 4
[All GCED Questions]

Which control would BEST help detect a potential insider threat?

Show Suggested Answer Hide Answer
Suggested Answer: C

Contribute your Thoughts:

0/2000 characters
Altha
8 months ago
D is interesting, but I doubt it would help much with insider threats.
upvoted 0 times
...
Isaac
9 months ago
Wait, are we really considering B? That sounds risky!
upvoted 0 times
...
Armando
9 months ago
Not sure about that, A could also be effective if done right.
upvoted 0 times
...
Lauryn
9 months ago
Totally agree, C makes the most sense for catching insider threats.
upvoted 0 times
...
Hester
9 months ago
I think option C is the best choice. Regular log reviews are crucial.
upvoted 0 times
...
Lavonna
9 months ago
I practiced a similar question before, and I think option B is risky. Giving everyone the same access could actually increase the chances of an insider threat, right?
upvoted 0 times
...
Paris
10 months ago
I'm leaning towards option D because cross-training could help prevent one person from having too much control. But I wonder if that really addresses the insider threat directly.
upvoted 0 times
...
Jade
10 months ago
I remember studying about insider threats, and I feel like option A could be effective too. Mandatory approvals seem like they would add a layer of scrutiny.
upvoted 0 times
...
Nguyet
10 months ago
I think option C might be the best choice since regular log reviews can help catch unusual access patterns. But I'm not entirely sure if that's enough on its own.
upvoted 0 times
...
Truman
10 months ago
Requiring multiple employees to be trained on each task could help prevent a single person from having too much control. That seems like a good strategy to me.
upvoted 0 times
...
Denna
10 months ago
I think the mandatory approval process for access requests is the best way to detect potential insider threats. That way you can closely monitor who has access to sensitive information.
upvoted 0 times
...
Deangelo
10 months ago
Hmm, I'm not sure about this one. I'll have to review the material on insider threats again.
upvoted 0 times
...
Hollis
10 months ago
This seems like a tricky question. I'll need to think through the different options carefully.
upvoted 0 times
...
Mollie
10 months ago
Wait, I'm a bit confused. Didn't the question mention enabling auto-provisioning for Azure Defender? Manually installing the agent might not be the right approach.
upvoted 0 times
...
Jame
1 year ago
Haha, option D is just asking for trouble. Making everyone learn each other's jobs? What is this, communist Russia?
upvoted 0 times
Junita
1 year ago
I agree, having multiple scheduled log reviews can definitely help detect any suspicious activity.
upvoted 0 times
...
Rana
1 year ago
Yeah, option D does seem a bit extreme. I think option A is a better choice.
upvoted 0 times
...
Claribel
1 year ago
C) Multiple scheduled log reviews of all employee access levels throughout the year
upvoted 0 times
...
Mariann
1 year ago
A) Mandatory approval process for executive and administrative access requests.
upvoted 0 times
...
...
Clorinda
1 year ago
Multiple log reviews throughout the year in option C sounds like a good way to stay on top of access issues.
upvoted 0 times
Alton
1 year ago
D) Requiring more than one employee to be trained on each task or job duty.
upvoted 0 times
...
Lina
1 year ago
That does sound like a good way to catch any potential issues before they escalate.
upvoted 0 times
...
Denise
1 year ago
C) Multiple scheduled log reviews of all employee access levels throughout the year
upvoted 0 times
...
Adolph
1 year ago
A) Mandatory approval process for executive and administrative access requests.
upvoted 0 times
...
...
Maira
1 year ago
I'm not sure about B - giving everyone the same access and just monitoring doesn't seem secure enough to me.
upvoted 0 times
Sue
1 year ago
C) Multiple scheduled log reviews of all employee access levels throughout the year
upvoted 0 times
...
Darell
1 year ago
A) Mandatory approval process for executive and administrative access requests.
upvoted 0 times
...
...
Louann
1 year ago
Option A seems like the best way to control who has administrative access and prevent insider threats. Mandatory approvals are key.
upvoted 0 times
...
Carin
1 year ago
I see your point, Remedios. But I think option D could also be helpful as it ensures more than one employee is trained on each task.
upvoted 0 times
...
Remedios
1 year ago
I disagree, I believe option C would be more effective because it involves regular monitoring of employee access levels.
upvoted 0 times
...
Floyd
1 year ago
I think option A would be the best control for detecting insider threats.
upvoted 0 times
...

Save Cancel