Discuss Isaca CISM Exam Topic 4 Question 41

The BEST way to identify the risk associated with a social engineering attack is to

AReview single sign-on authentication logs.

BPerform a business risk assessment of the email filtering system.

CMonitor the intrusion detection system (IDS)

DTest user knowledge of information security practices.

Suggested Answer: D

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Marylin 11 months ago

Single sign-on logs don’t really help with this.

Amos 12 months ago

Wait, can testing really prevent social engineering?

Magnolia 12 months ago

Definitely agree with option D!

Cheryl 12 months ago

I think monitoring the IDS is more effective.

Valda 1 year ago

Testing user knowledge is key!

Marva 1 year ago

I vaguely recall that social engineering often targets users, so maybe testing their knowledge is key? But I’m not entirely confident about that.

Nichelle 1 year ago

I’m torn between A and D. Reviewing logs seems important, but I feel like understanding user awareness is crucial too.

Alberto 1 year ago

I remember a practice question that focused on monitoring systems like IDS, which could be option C. But I feel like that’s more about detecting attacks rather than identifying risks.

Floyd 1 year ago

I think option D makes the most sense since testing user knowledge directly relates to social engineering risks. But I'm not completely sure.

Yoko 1 year ago

Okay, let me see here. The Retrospect Sprint Meeting is all about reflecting on the previous sprint and identifying ways to improve the process. I don't think identifying feature improvements would be one of the main objectives, so I'm going to go with that as the answer.

Lera 1 year ago

I think the answer is Workspace ONE Content, since that's the app that handles content delivery to enrolled devices.

Dianne 1 year ago

Hmm, I'm a bit confused by the wording here. I'll need to review my notes on method signatures and method overriding to figure out which option is correct.

Viola 1 year ago

I recall a practice question where we discussed how the UN is often involved in sanctions against countries. I should go with option D.

Gail 1 year ago

I'm a bit confused by the wording of this question. Let me re-read it and see if I can figure out the best approach.

Isaca CISM Exam - Topic 4 Question 41 Discussion