MENU
A business unit uses e-commerce with a strong password policy. Many customers complain that they cannot remember their password because they are too long and complex. The business unit states it is imperative to improve the customer experience. The information security manager should FIRST.
Suggested Answer: C
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
15 comments · newest first
MA
Mayra
11 months ago
Evaluating customer experience is key for revenue!
AL
Albina
12 months ago
Wait, changing the password policy? Isn't that risky?
AL
Aleshia
12 months ago
Two-factor authentication is the way to go!
AL
Alishia
12 months ago
But customers need to remember them too!
HE
Heidy
1 year ago
Strong passwords are a must for security!
CE
Celeste
1 year ago
Evaluating the impact on revenue sounds important, but I feel like we should address the password issue directly first.
SH
Shenika
1 year ago
Two-factor authentication seems like a solid option, but I wonder if it would actually help with the password memory issue.
MI
Micah
1 year ago
I think we practiced a similar question where alternative verification methods were suggested first. That might be a good approach here too.
FR
Frederic
1 year ago
I remember discussing the importance of balancing security and user experience, but I'm not sure if changing the password policy is the best first step.
GR
Graciela
1 year ago
I'm confident I know the key points about Oracle instance recovery. I'll select the options I'm sure about.
LU
Luann
1 year ago
Hmm, I'm a little unsure about this one. I know NTP is for time synchronization, but I'm not totally clear on the specifics of what the client is responsible for. I'll have to think this through carefully.
FL
Flo
1 year ago
I've studied this topic before, and I'm pretty confident that Firewall as a Service (FWaaS) is one of the Prisma Access security services. I'll go with option B.
TH
Thurman
1 year ago
This question is asking about the scope of an ISO/IEC 20000 audit, so I think the key is to focus on the management system and services that are in scope for certification.
FR
Franchesca
1 year ago
Okay, I think I've got this. The key is configuring OSPF virtual links to connect the two non-backbone areas. Option C looks like the right answer.
SA
Salena
1 year ago
Okay, let's see. We need to run a business-critical workload, so we can't just use preemptible VMs. Migrating to a Managed Instance Group (option B) could work, but I'm not sure if that would actually save us money. I think I'll go with option A and look into Committed Use Discounts.