MENU
Which of the following is the BEST control to mitigate the malware risk associated with an instant messaging (IM) system?
Suggested Answer: B
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
SA
Sabrina
11 months ago
Encrypting IM traffic sounds good, but is it really effective against malware?
VI
Viola
12 months ago
Allowing only corporate IM solutions is the best way to go!
DE
Desmond
12 months ago
Wait, can blocking external IM traffic really help that much?
CE
Ceola
12 months ago
Totally agree, that’s the easiest way to stop malware!
JA
Janey
1 year ago
I think blocking attachments in IM is a solid move.
MI
Miesha
1 year ago
Allowing only corporate IM solutions seems like a solid option, but I feel like it might limit communication too much.
BE
Bettina
1 year ago
Encrypting IM traffic sounds important, but I wonder if it really addresses the malware risk directly.
FR
Francene
1 year ago
I remember a practice question where blocking external IM traffic was considered effective, but I can't recall the details.
ON
Ona
1 year ago
I think blocking attachments in IM might be a good start, but I'm not sure if it's the best overall control.
JO
Jose
1 year ago
The question is asking about the features, so I'll focus on identifying the two most relevant options from the list. Capturing the IP address and e-signature seem like good choices, but I'm not 100% sure.
BE
Belen
1 year ago
I'm a bit confused because round-about doesn't sound right, but I can't recall if meet-in-the-middle is also costly.
LO
Lonny
1 year ago
Alright, I've got this. The "-si" flag is used to conduct an IDLE scan, which leverages another host's IP ID sequence to mask your own identity and avoid detection. By sending spoofed packets from the IDLE host, you can gather information about the target systems without leaving your own fingerprint. This is a clever technique, so I feel pretty confident about this one.
PA
Page
1 year ago
Prototyping sounds like the right approach here. That's how you can simulate the final design and ensure the development is on track.