New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC GCED Exam - Topic 4 Question 51 Discussion

Actual exam question for GIAC's GCED exam
Question #: 51
Topic #: 4
[All GCED Questions]

Which control would BEST help detect a potential insider threat?

Show Suggested Answer Hide Answer
Suggested Answer: C

Contribute your Thoughts:

0/2000 characters
Altha
3 months ago
D is interesting, but I doubt it would help much with insider threats.
upvoted 0 times
...
Isaac
3 months ago
Wait, are we really considering B? That sounds risky!
upvoted 0 times
...
Armando
3 months ago
Not sure about that, A could also be effective if done right.
upvoted 0 times
...
Lauryn
4 months ago
Totally agree, C makes the most sense for catching insider threats.
upvoted 0 times
...
Hester
4 months ago
I think option C is the best choice. Regular log reviews are crucial.
upvoted 0 times
...
Lavonna
4 months ago
I practiced a similar question before, and I think option B is risky. Giving everyone the same access could actually increase the chances of an insider threat, right?
upvoted 0 times
...
Paris
4 months ago
I'm leaning towards option D because cross-training could help prevent one person from having too much control. But I wonder if that really addresses the insider threat directly.
upvoted 0 times
...
Jade
4 months ago
I remember studying about insider threats, and I feel like option A could be effective too. Mandatory approvals seem like they would add a layer of scrutiny.
upvoted 0 times
...
Nguyet
5 months ago
I think option C might be the best choice since regular log reviews can help catch unusual access patterns. But I'm not entirely sure if that's enough on its own.
upvoted 0 times
...
Truman
5 months ago
Requiring multiple employees to be trained on each task could help prevent a single person from having too much control. That seems like a good strategy to me.
upvoted 0 times
...
Denna
5 months ago
I think the mandatory approval process for access requests is the best way to detect potential insider threats. That way you can closely monitor who has access to sensitive information.
upvoted 0 times
...
Deangelo
5 months ago
Hmm, I'm not sure about this one. I'll have to review the material on insider threats again.
upvoted 0 times
...
Hollis
5 months ago
This seems like a tricky question. I'll need to think through the different options carefully.
upvoted 0 times
...
Mollie
5 months ago
Wait, I'm a bit confused. Didn't the question mention enabling auto-provisioning for Azure Defender? Manually installing the agent might not be the right approach.
upvoted 0 times
...
Jame
10 months ago
Haha, option D is just asking for trouble. Making everyone learn each other's jobs? What is this, communist Russia?
upvoted 0 times
Junita
8 months ago
I agree, having multiple scheduled log reviews can definitely help detect any suspicious activity.
upvoted 0 times
...
Rana
8 months ago
Yeah, option D does seem a bit extreme. I think option A is a better choice.
upvoted 0 times
...
Claribel
9 months ago
C) Multiple scheduled log reviews of all employee access levels throughout the year
upvoted 0 times
...
Mariann
9 months ago
A) Mandatory approval process for executive and administrative access requests.
upvoted 0 times
...
...
Clorinda
10 months ago
Multiple log reviews throughout the year in option C sounds like a good way to stay on top of access issues.
upvoted 0 times
Alton
9 months ago
D) Requiring more than one employee to be trained on each task or job duty.
upvoted 0 times
...
Lina
10 months ago
That does sound like a good way to catch any potential issues before they escalate.
upvoted 0 times
...
Denise
10 months ago
C) Multiple scheduled log reviews of all employee access levels throughout the year
upvoted 0 times
...
Adolph
10 months ago
A) Mandatory approval process for executive and administrative access requests.
upvoted 0 times
...
...
Maira
10 months ago
I'm not sure about B - giving everyone the same access and just monitoring doesn't seem secure enough to me.
upvoted 0 times
Sue
10 months ago
C) Multiple scheduled log reviews of all employee access levels throughout the year
upvoted 0 times
...
Darell
10 months ago
A) Mandatory approval process for executive and administrative access requests.
upvoted 0 times
...
...
Louann
10 months ago
Option A seems like the best way to control who has administrative access and prevent insider threats. Mandatory approvals are key.
upvoted 0 times
...
Carin
11 months ago
I see your point, Remedios. But I think option D could also be helpful as it ensures more than one employee is trained on each task.
upvoted 0 times
...
Remedios
11 months ago
I disagree, I believe option C would be more effective because it involves regular monitoring of employee access levels.
upvoted 0 times
...
Floyd
11 months ago
I think option A would be the best control for detecting insider threats.
upvoted 0 times
...

Save Cancel