Isaca CRISC Exam - Topic 8 Question 75 Discussion

Actual exam question for Isaca's CRISC exam

Question #: 75
Topic #: 8

[All CRISC Questions]

Which of the following controls would BEST reduce the risk of account compromise?

AEnforce password changes.

BEnforce multi-factor authentication (MFA).

CEnforce role-based authentication.

DEnforce password encryption.

Show Suggested Answer

Suggested Answer: A

by Bettina at May 23, 2024, 07:50 PM

Limited Time Offer

25%

Off

Get Premium CRISC Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mohammad

3 months ago

Wait, isn't MFA a bit of a hassle though?

upvoted 0 times

...

Zoila

3 months ago

Password encryption is important, but it won't stop account hacks.

upvoted 0 times

...

Jill

3 months ago

Role-based authentication adds another layer, but MFA is still better.

upvoted 0 times

...

German

4 months ago

Really? I thought password changes were enough.

upvoted 0 times

...

Norah

4 months ago

MFA is definitely the way to go!

upvoted 0 times

...

Alona

4 months ago

I'm leaning towards MFA too, but I wonder if enforcing password encryption might also play a significant role in protecting accounts.

upvoted 0 times

...

Reid

4 months ago

I feel like role-based authentication could help, but I can't recall if it directly reduces account compromise risk as effectively as MFA.

upvoted 0 times

...

Willow

4 months ago

I remember practicing a question similar to this, and I think enforcing password changes was mentioned as a good practice, but it might not be enough on its own.

upvoted 0 times

...

Sunshine

5 months ago

I think enforcing multi-factor authentication (MFA) is really important, but I'm not entirely sure if it's the best option here.

upvoted 0 times

...

Lorita

5 months ago

Enforcing MFA is the way to go. That's the most effective control to prevent unauthorized access to accounts.

upvoted 0 times

...

Stevie

5 months ago

I'm not sure about this one. Enforcing password changes or role-based authentication could also help, but I'm not confident which one is the best.

upvoted 0 times

...

Clorinda

5 months ago

Enforcing multi-factor authentication (MFA) is definitely the best way to reduce the risk of account compromise. That's the obvious answer here.

upvoted 0 times

...

Marjory

5 months ago

Hmm, this looks like a tricky one. I'll need to think it through carefully.

upvoted 0 times

...

Rosalind

5 months ago

Password encryption doesn't really address the core issue of account compromise. I'd say the MFA option is the clear winner here.

upvoted 0 times

...

Ling

5 months ago

Sunk cost is definitely not relevant, since it's a cost that's already been incurred and can't be changed. I'm pretty sure on that one.

upvoted 0 times

...

Delisa

5 months ago

This looks like a pretty straightforward question about volume management commands. I think the answer is C - vxstat, since that command is used to display the status of various volume operations.

upvoted 0 times

...

Carli

5 months ago

I practiced questions on tool abilities related to business architecture. I wish I could remember if that's part of the maturity model too!

upvoted 0 times

...

Thaddeus

5 months ago

I remember a practice question about comments where the answer was definitely not "<>" or "==", so that's a good sign.

upvoted 0 times

...

Della

10 months ago

Enforcing password changes? That's like making your users change their underwear every day - it's just not practical or effective.

upvoted 0 times

Carissa

8 months ago

User 3: Regularly updating security patches and software could also be beneficial.

upvoted 0 times

...

Rickie

9 months ago

User 2: User training on recognizing phishing emails could also help.

upvoted 0 times

...

Emmanuel

9 months ago

User 1: How about implementing multi-factor authentication?

upvoted 0 times

...

Devorah

10 months ago

Multi-factor authentication is like having a bodyguard for your account - even if the password gets out, the bodyguard ain't letting anyone in without proper ID.

upvoted 0 times

Lavera

9 months ago

Absolutely, combining both is the best way to protect your account.

upvoted 0 times

...

Dewitt

9 months ago

Using a strong password is important too.

upvoted 0 times

...

Roselle

10 months ago

I agree, it adds an extra layer of security.

upvoted 0 times

...

Larue

10 months ago

Multi-factor authentication is definitely the way to go.

upvoted 0 times

...

Aracelis

10 months ago

Password encryption? That's like putting a bandaid on a broken leg. MFA is the real deal when it comes to reducing account compromise risk.

upvoted 0 times

...

Jade

10 months ago

Enforcing password changes? That's so 2000s. Why bother when you can just have MFA and call it a day? It's like using a sledgehammer to crack a nut.

upvoted 0 times

Lai

10 months ago

I agree, password changes are outdated. MFA is the way forward.

upvoted 0 times

...

Pauline

10 months ago

MFA is definitely the way to go. It's much more secure.

upvoted 0 times

...

Corrinne

10 months ago

Role-based authentication is great, but it doesn't protect against account compromise on its own. You need that extra layer of MFA to really lock things down.

upvoted 0 times

...

Annice

10 months ago

Multi-factor authentication is the way to go! It's like having a super-powered lock on your account - even if someone steals your password, they can't get in without that extra step.

upvoted 0 times

...