MENU
Which of the following poses the GREATEST risk to an organization when employees use public social networking sites?
Suggested Answer: C
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Social engineering is the manipulation of people to perform actions or divulge confidential information. It is a common technique used by attackers to gain unauthorized access to systems or data. Employees who use public social networking sites may be vulnerable to social engineering attacks, such as phishing, baiting, or pretexting, which pose the greatest risk to the organization's security.The other options are not as serious as social engineering, as they relate to web application vulnerabilities, intellectual property rights, and reputation management, which are less likely to compromise the organization's assets or operations.Reference:CISA Review Manual (Digital Version), Domain 5: Protection of Information Assets, Section 5.3 Security Awareness Training1
31 comments · newest first
DE
Deonna
10 months ago
Wait, are adverse posts really that impactful?
TA
Tammy
10 months ago
XSS isn't as common in social media, right?
LE
Lezlie
10 months ago
Social engineering is a huge risk!
TH
Theola
10 months ago
I think adverse posts can really damage a brand.
LU
Luisa
10 months ago
Copyright violations are often overlooked, but they're serious!
SE
Selma
11 months ago
Copyright violations might not seem as urgent, but they can lead to legal issues. I wonder if that could be considered a greater risk than the others.
MI
Mila
11 months ago
Cross-site scripting sounds familiar, but I can't recall how it specifically relates to social networking. Is it really a major concern?
DE
Denise
11 months ago
I remember a practice question that mentioned adverse posts damaging a company's reputation. That seems pretty serious too.
LE
Lemuel
11 months ago
I think social engineering could be a big risk since it involves manipulating employees directly. But I'm not entirely sure if it's the greatest risk.
NI
Nicolette
11 months ago
I'm confident the answer is C. Social engineering is a major concern when employees are using public social media for work purposes. That opens up the organization to all kinds of potential attacks.
RE
Rebbecca
12 months ago
B - copyright violations seems like the least risky option here. I don't think that would pose as big of a threat as the other choices.
LY
Lyndia
12 months ago
I'm leaning towards A - cross-site scripting (XSS). If employees are posting on public sites, their accounts could be compromised and used to inject malicious code into the organization's systems.
VI
Virgina
12 months ago
Hmm, I'm not sure. I was thinking maybe D - adverse posts about the organization could be the biggest risk. That kind of negative publicity could really damage the company's reputation.
AR
Arlean
1 year ago
I think the answer is C - social engineering. Employees using public social media could be tricked into revealing sensitive information that could be used to attack the organization.
ER
Erasmo
1 year ago
That's true, social engineering can be a big risk too.
AV
Avery
1 year ago
Social engineering, hands down. Who needs hacking when you can just trick someone into giving up the keys to the kingdom?
DO
Douglass
1 year ago
A) Cross-site scripting (XSS)
TA
Tatum
1 year ago
But what about C) Social engineering? That can lead to data breaches and other security issues.
VE
Veronika
1 year ago
I'm going with C. Social engineering is the most insidious and can lead to all sorts of nasty consequences for the organization.
GA
Gabriele
1 year ago
B) Copyright violations
MA
Mari
1 year ago
A) Cross-site scripting (XSS)
MU
Muriel
1 year ago
I agree with Erasmo, negative posts can damage the organization's reputation.
ER
Erasmo
1 year ago
I think D) Adverse posts about the organization is the greatest risk.
TH
Thea
1 year ago
While adverse posts are a concern, I believe social engineering poses the greatest threat. Employees can inadvertently give away too much information.
HA
Hannah
1 year ago
Definitely agree with Jackie. Social engineering is a sneaky and effective way for attackers to gain access to sensitive information.
JA
Jaleesa
1 year ago
C) Social engineering
HE
Herminia
1 year ago
A) Cross-site scripting (XSS)
JA
Jackie
1 year ago
I think social engineering is the biggest risk here. Employees can easily fall victim to manipulation on public social media.
MA
Marci
1 year ago
C) Social engineering
GO
Goldie
1 year ago
B) Copyright violations
BR
Brett
1 year ago
A) Cross-site scripting (XSS)