MENU
Which of the following controls would BEST reduce the risk of account compromise?
Suggested Answer: A
Get Premium CRISC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
MO
Mohammad
10 months ago
Wait, isn't MFA a bit of a hassle though?
ZO
Zoila
11 months ago
Password encryption is important, but it won't stop account hacks.
JI
Jill
11 months ago
Role-based authentication adds another layer, but MFA is still better.
GE
German
11 months ago
Really? I thought password changes were enough.
NO
Norah
11 months ago
MFA is definitely the way to go!
AL
Alona
12 months ago
I'm leaning towards MFA too, but I wonder if enforcing password encryption might also play a significant role in protecting accounts.
RE
Reid
12 months ago
I feel like role-based authentication could help, but I can't recall if it directly reduces account compromise risk as effectively as MFA.
WI
Willow
12 months ago
I remember practicing a question similar to this, and I think enforcing password changes was mentioned as a good practice, but it might not be enough on its own.
SU
Sunshine
1 year ago
I think enforcing multi-factor authentication (MFA) is really important, but I'm not entirely sure if it's the best option here.
LO
Lorita
1 year ago
Enforcing MFA is the way to go. That's the most effective control to prevent unauthorized access to accounts.
ST
Stevie
1 year ago
I'm not sure about this one. Enforcing password changes or role-based authentication could also help, but I'm not confident which one is the best.
CL
Clorinda
1 year ago
Enforcing multi-factor authentication (MFA) is definitely the best way to reduce the risk of account compromise. That's the obvious answer here.
MA
Marjory
1 year ago
Hmm, this looks like a tricky one. I'll need to think it through carefully.
RO
Rosalind
1 year ago
Password encryption doesn't really address the core issue of account compromise. I'd say the MFA option is the clear winner here.
LI
Ling
1 year ago
Sunk cost is definitely not relevant, since it's a cost that's already been incurred and can't be changed. I'm pretty sure on that one.
DE
Delisa
1 year ago
This looks like a pretty straightforward question about volume management commands. I think the answer is C - vxstat, since that command is used to display the status of various volume operations.
CA
Carli
1 year ago
I practiced questions on tool abilities related to business architecture. I wish I could remember if that's part of the maturity model too!
TH
Thaddeus
1 year ago
I remember a practice question about comments where the answer was definitely not "<>" or "==", so that's a good sign.
DE
Della
1 year ago
Enforcing password changes? That's like making your users change their underwear every day - it's just not practical or effective.
CA
Carissa
1 year ago
User 3: Regularly updating security patches and software could also be beneficial.
RI
Rickie
1 year ago
User 2: User training on recognizing phishing emails could also help.
EM
Emmanuel
1 year ago
User 1: How about implementing multi-factor authentication?
DE
Devorah
1 year ago
Multi-factor authentication is like having a bodyguard for your account - even if the password gets out, the bodyguard ain't letting anyone in without proper ID.
LA
Lavera
1 year ago
Absolutely, combining both is the best way to protect your account.
DE
Dewitt
1 year ago
Using a strong password is important too.
RO
Roselle
1 year ago
I agree, it adds an extra layer of security.
LA
Larue
1 year ago
Multi-factor authentication is definitely the way to go.
AR
Aracelis
1 year ago
Password encryption? That's like putting a bandaid on a broken leg. MFA is the real deal when it comes to reducing account compromise risk.
JA
Jade
1 year ago
Enforcing password changes? That's so 2000s. Why bother when you can just have MFA and call it a day? It's like using a sledgehammer to crack a nut.
LA
Lai
1 year ago
I agree, password changes are outdated. MFA is the way forward.
PA
Pauline
1 year ago
MFA is definitely the way to go. It's much more secure.
CO
Corrinne
1 year ago
Role-based authentication is great, but it doesn't protect against account compromise on its own. You need that extra layer of MFA to really lock things down.
AN
Annice
1 year ago
Multi-factor authentication is the way to go! It's like having a super-powered lock on your account - even if someone steals your password, they can't get in without that extra step.
LE
Leoma
2 years ago
C) Enforce role-based authentication. Limiting access based on roles can reduce the risk of compromise.
RO
Ronald
2 years ago
A) Enforce password changes. Regularly changing passwords can help prevent unauthorized access.
PE
Pearlie
2 years ago
B) Enforce multi-factor authentication (MFA). It adds an extra layer of security.