ISC2 CISSP Exam - Topic 2 Question 69 Discussion

Actual exam question for ISC2's CISSP exam

Question #: 69
Topic #: 2

A recent information security risk assessment identified weak system access controls on mobile devices as a high me In order to address this risk and ensure only authorized staff access company information, which of the following should the organization implement?

AIntrusion prevention system (IPS)

BMulti-factor authentication (MFA)

CData loss protection (DLP)

DData at rest encryption

Show Suggested Answer

Suggested Answer: B

by Micaela at Mar 28, 2023, 06:04 AM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Paz

4 months ago

IPS won't help with access control directly.

upvoted 0 times

...

Magdalene

4 months ago

Encryption is key, but MFA should be prioritized.

upvoted 0 times

...

Rodney

4 months ago

Really? I doubt MFA alone will solve all access issues.

upvoted 0 times

...

Tanja

4 months ago

I think DLP is more important here.

upvoted 0 times

...

Alease

4 months ago

MFA is a must for mobile access!

upvoted 0 times

...

Natalie

5 months ago

I recall that encryption is important, but it might not directly address the access control issue as effectively as MFA would.

upvoted 0 times

...

Melda

5 months ago

I'm a bit confused because I thought data loss protection was more about preventing data leaks rather than controlling access.

upvoted 0 times

...

Garry

5 months ago

I think we had a practice question about access controls and MFA was the answer. It seems like the most relevant choice for this scenario.

upvoted 0 times

...

Nieves

5 months ago

I remember we discussed multi-factor authentication in class as a strong way to secure access, but I'm not entirely sure if it's the best option here.

upvoted 0 times

...

Sharita

5 months ago

Okay, I think I understand the requirement. I'll need to add a query string parameter to the form editor to accept the data parameter passed from the JavaScript function. Let's see if that does the trick.

upvoted 0 times

...

Yaeko

5 months ago

I'm a bit confused here. The question is talking about the Automated Install server and the AI manifest, but none of these subcommands seem like an exact match. I'll have to think about this one a bit more.

upvoted 0 times

...

Felicitas

5 months ago

This question seems straightforward, I think I can narrow it down to a couple options based on the key details provided.

upvoted 0 times

...

Kristine

5 months ago

Based on the question, I believe the correct answer is D. The TypeAhead element needs to retrieve the contact data from a DataRaptor Extract Action, which can then be used to populate the typeahead suggestions.

upvoted 0 times

...

Rosenda

5 months ago

I think I've got it! The council is focused on the high-level strategy and vision, not the day-to-day implementation. So the development of education and communication modules is likely something that would be handled by other teams, not the council itself.

upvoted 0 times

...

Hyun

5 months ago

I remember discussing the importance of the 'X-Forwarded-For' header and how it helps in identifying real visitor IPs in class. I think it might be one of the correct options.

upvoted 0 times

...