Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Isaca CISM Exam - Topic 4 Question 72 Discussion

Posted by Yuki on Apr 28, 2024 at 04:24 PM

An organization finds it necessary to quickly shift to a work-fromhome model with an increased need for remote access security.

Which of the following should be given immediate focus?

Suggested Answer: C

Data encryption standards are the best information security initiative for creating an enterprise strategy for protecting data across multiple data repositories and different departments because they help to ensure the confidentiality, integrity, and availability of data in transit and at rest. Data encryption is a process of transforming data into an unreadable format using a secret key or algorithm, so that only authorized parties can access and decrypt it. Data encryption standards are the rules or specifications that define how data encryption should be performed, such as the type, strength, and mode of encryption, the key management and distribution methods, and the compliance requirements. Data encryption standards help to protect data from unauthorized access, modification, or theft, as well as to meet the regulatory obligations for data privacy and security. Therefore, data encryption standards are the correct answer.


https://www.techtarget.com/searchdatabackup/tip/20-keys-to-a-successful-enterprise-data-protection-strategy

https://cloudian.com/guides/data-protection/data-protection-strategy-10-components-of-an-effective-strategy/

https://www.veritas.com/information-center/enterprise-data-protection

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
43 comments · newest first
GA
Gail 10 months ago
Wait, are we really just now considering zero trust? That’s wild!
RA
Ranee 11 months ago
Enhancing cyber response capability seems a bit too late, don’t you think?
NI
Nidia 11 months ago
Endpoint security is crucial right now!
CL
Clemencia 11 months ago
I think network-level authentication should be prioritized.
DO
Dortha 11 months ago
Zero trust access model is a must!
RO
Roslyn 12 months ago
Strengthening endpoint security seems like a solid choice, but I recall a practice question where zero trust was emphasized as a priority.
VI
Virgina 12 months ago
I feel like enhancing cyber response capability is important too, but I wonder if it should come after securing access first.
JA
Jacinta 12 months ago
I think enabling network-level authentication could be crucial right now, especially since everyone is working remotely.
VI
Vivan 1 year ago
I remember we discussed zero trust models in class, but I'm not entirely sure if that's the best immediate focus.
GE
Georgeanna 1 year ago
Zero trust access is the way to go here. It provides the most comprehensive security for remote work by verifying every user and device, not just the network.
AL
Alexis 1 year ago
I'm a bit confused on the differences between the options. Can someone explain the pros and cons of each approach? I want to make sure I pick the right one.
EV
Evelynn 1 year ago
Definitely go with option A - zero trust access. That's the best way to quickly secure remote connections without relying on traditional network perimeter defenses.
MA
Mari 1 year ago
Hmm, I'm not sure about this one. I'm debating between the zero trust model and strengthening endpoint security. Both seem important for remote work security.
LE
Leah 1 year ago
This one seems pretty straightforward. I'd say the immediate focus should be on moving to a zero trust access model to secure remote access.
SH
Sharmaine 1 year ago
I'm leaning towards Part VI: TOGAF Reference Models. That's where TOGAF provides the detailed reference models and information on the underlying metamodel, so that seems like the most relevant section.
AS
Ashanti 1 year ago
Okay, I've got this. Efficiency, usability, and compatibility are all characteristics of quality in use according to ISO 25010. I'm confident that's the right answer.
JA
Jamika 1 year ago
Zero trust access model? More like zero common sense, amirite? Just give everyone a tin can and a piece of string, that's the real remote access security solution!
GA
Gayla 1 year ago
↳ replying to Jamika
D) Strengthening endpoint security
RE
Renay 1 year ago
↳ replying to Jamika
C) Enhancing cyber response capability
BE
Becky 1 year ago
↳ replying to Jamika
B) Enabling network-level authentication
AR
Ardella 1 year ago
↳ replying to Jamika
A) Moving to a zero trust access model
OL
Olen 1 year ago
Strengthening endpoint security is definitely the way to go. I mean, what's the point of having a fancy security system if your employees are just using their grandma's ancient laptop to access sensitive data?
HE
Herman 1 year ago
↳ replying to Olen
C) Enhancing cyber response capability
TI
Tijuana 1 year ago
↳ replying to Olen
B) Enabling network-level authentication
CH
Cherri 1 year ago
↳ replying to Olen
A) Moving to a zero trust access model
RI
Richelle 1 year ago
Enhancing the cyber response capability is important, but it won't do much good if the initial security measures aren't in place. Gotta start with the basics first.
FR
Franchesca 1 year ago
↳ replying to Richelle
C) Enhancing cyber response capability
HO
Holley 1 year ago
↳ replying to Richelle
B) Enabling network-level authentication
CI
Ciara 1 year ago
↳ replying to Richelle
A) Moving to a zero trust access model
JU
Judy 1 year ago
I'm not sure network-level authentication is the best option. With everyone working remotely, endpoint security should be the top priority to protect those devices from potential threats.
JU
Julianna 1 year ago
↳ replying to Judy
D) Strengthening endpoint security
AN
Annice 1 year ago
↳ replying to Judy
D) Strengthening endpoint security
KI
Kimberlie 1 year ago
↳ replying to Judy
C) Enhancing cyber response capability
ME
Mertie 1 year ago
↳ replying to Judy
B) Enabling network-level authentication
CA
Catrice 1 year ago
↳ replying to Judy
B) Enabling network-level authentication
LA
Laura 1 year ago
↳ replying to Judy
A) Moving to a zero trust access model
CE
Celeste 1 year ago
↳ replying to Judy
A) Moving to a zero trust access model
PO
Portia 1 year ago
A zero trust access model seems like the way to go here. It's all about verifying every user and device before allowing access, which is crucial for remote work security.
JI
Jimmie 1 year ago
↳ replying to Portia
User 2: Absolutely, verifying every user and device is key to preventing unauthorized access.
DO
Donette 1 year ago
↳ replying to Portia
User 1: I agree, a zero trust access model would definitely help in ensuring secure remote access.
PA
Paulene 1 year ago
I believe enhancing cyber response capability is also important in this situation.
DE
Deandrea 2 years ago
I agree with Sabrina. Zero trust access model can help secure remote access better.
SA
Sabrina 2 years ago
I think we should focus on moving to a zero trust access model.
0/2000 characters

Save Cancel