MENU
Which control would BEST help detect a potential insider threat?
Suggested Answer: C
Get Premium GCED Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
AL
Altha
10 months ago
D is interesting, but I doubt it would help much with insider threats.
IS
Isaac
11 months ago
Wait, are we really considering B? That sounds risky!
AR
Armando
11 months ago
Not sure about that, A could also be effective if done right.
LA
Lauryn
11 months ago
Totally agree, C makes the most sense for catching insider threats.
HE
Hester
11 months ago
I think option C is the best choice. Regular log reviews are crucial.
LA
Lavonna
11 months ago
I practiced a similar question before, and I think option B is risky. Giving everyone the same access could actually increase the chances of an insider threat, right?
PA
Paris
12 months ago
I'm leaning towards option D because cross-training could help prevent one person from having too much control. But I wonder if that really addresses the insider threat directly.
JA
Jade
12 months ago
I remember studying about insider threats, and I feel like option A could be effective too. Mandatory approvals seem like they would add a layer of scrutiny.
NG
Nguyet
12 months ago
I think option C might be the best choice since regular log reviews can help catch unusual access patterns. But I'm not entirely sure if that's enough on its own.
TR
Truman
12 months ago
Requiring multiple employees to be trained on each task could help prevent a single person from having too much control. That seems like a good strategy to me.
DE
Denna
12 months ago
I think the mandatory approval process for access requests is the best way to detect potential insider threats. That way you can closely monitor who has access to sensitive information.
DE
Deangelo
1 year ago
Hmm, I'm not sure about this one. I'll have to review the material on insider threats again.
HO
Hollis
1 year ago
This seems like a tricky question. I'll need to think through the different options carefully.
MO
Mollie
1 year ago
Wait, I'm a bit confused. Didn't the question mention enabling auto-provisioning for Azure Defender? Manually installing the agent might not be the right approach.
JA
Jame
1 year ago
Haha, option D is just asking for trouble. Making everyone learn each other's jobs? What is this, communist Russia?
JU
Junita
1 year ago
I agree, having multiple scheduled log reviews can definitely help detect any suspicious activity.
RA
Rana
1 year ago
Yeah, option D does seem a bit extreme. I think option A is a better choice.
CL
Claribel
1 year ago
C) Multiple scheduled log reviews of all employee access levels throughout the year
MA
Mariann
1 year ago
A) Mandatory approval process for executive and administrative access requests.
CL
Clorinda
1 year ago
Multiple log reviews throughout the year in option C sounds like a good way to stay on top of access issues.
AL
Alton
1 year ago
D) Requiring more than one employee to be trained on each task or job duty.
LI
Lina
1 year ago
That does sound like a good way to catch any potential issues before they escalate.
DE
Denise
1 year ago
C) Multiple scheduled log reviews of all employee access levels throughout the year
AD
Adolph
1 year ago
A) Mandatory approval process for executive and administrative access requests.
MA
Maira
1 year ago
I'm not sure about B - giving everyone the same access and just monitoring doesn't seem secure enough to me.
SU
Sue
1 year ago
C) Multiple scheduled log reviews of all employee access levels throughout the year
DA
Darell
1 year ago
A) Mandatory approval process for executive and administrative access requests.
LO
Louann
1 year ago
Option A seems like the best way to control who has administrative access and prevent insider threats. Mandatory approvals are key.
CA
Carin
1 year ago
I see your point, Remedios. But I think option D could also be helpful as it ensures more than one employee is trained on each task.
RE
Remedios
2 years ago
I disagree, I believe option C would be more effective because it involves regular monitoring of employee access levels.
FL
Floyd
2 years ago
I think option A would be the best control for detecting insider threats.