MENU
A continuous information security-monitoring program can BEST reduce risk through which of the following?
Suggested Answer: C
Get Premium CISSP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
38 comments · newest first
PA
Patrick
10 months ago
Wait, can a program really reduce risk that much? Sounds too good to be true!
MI
Micah
11 months ago
D seems too narrow. Logging changes alone won't cut it.
SU
Susana
11 months ago
B sounds good, but how do we ensure visibility without overloading?
FR
Franklyn
11 months ago
I think C is just as important. People and processes matter!
AL
Alison
11 months ago
A is definitely the best choice! Identifying anomalies is key.
TR
Truman
12 months ago
I practiced a similar question where visibility into user accounts was key. I wonder if option B might be the right choice here.
JE
Jeffrey
12 months ago
I feel like logging changes is important too, but I can't recall if it's the most effective way to reduce risk compared to the other options.
TR
Truman
12 months ago
I think option C about encompassing people, process, and technology sounds familiar. It seems like a holistic approach to risk reduction.
ED
Edelmira
1 year ago
I remember we discussed the importance of collecting security events to spot anomalies, but I'm not sure if that's the best option here.
TA
Tammi
1 year ago
I'm a bit confused by the wording of the question. Are they looking for the single BEST approach, or are there multiple valid ways to reduce risk through continuous monitoring? I'll need to think this through carefully.
LI
Ligia
1 year ago
Ah, this is right up my alley. A continuous monitoring program needs to cover people, processes, and technology to effectively reduce risk. I'll make sure to highlight that in my answer.
RE
Ressie
1 year ago
Hmm, this is a tricky one. I'm not sure if I should focus on the technical aspects or the broader program elements. Maybe I'll review the options carefully and see if I can identify the BEST approach.
DE
Demetra
1 year ago
This looks like a straightforward question about security monitoring. I'll focus on the key elements of a continuous monitoring program - collecting events, correlating them for anomalies, and providing visibility into critical activities.
EA
Earleen
1 year ago
Hmm, this is a tricky one. I'll need to think through the different elements of pay and how the concerns and needs of employees at varying levels might differ.
EL
Elina
1 year ago
Continuous monitoring is like a seatbelt for your cybersecurity - it may not be the most exciting feature, but it could save your network in a crash.
JU
Juliann
1 year ago
Wait, they're not asking about the best way to monitor the office prankster's activities? I'm disappointed.
BE
Bette
1 year ago
D) Logging both scheduled and unscheduled system changes
KR
Kristofer
1 year ago
C) Encompassing people, process, and technology
GE
Geoffrey
1 year ago
B) Facilitating system-wide visibility into the activities of critical user accounts
NY
Nydia
1 year ago
A) Collecting security events and correlating them to identify anomalies
MA
Mari
1 year ago
Option B is important, but it's just one piece of the puzzle. We need visibility across the entire system.
BR
Brittni
1 year ago
D) Logging both scheduled and unscheduled system changes
LY
Lynelle
1 year ago
C) Encompassing people, process, and technology
TA
Tarra
1 year ago
A) Collecting security events and correlating them to identify anomalies
SA
Sabra
1 year ago
The ability to correlate security events and detect anomalies in Option A is also crucial for risk reduction.
AR
Arthur
1 year ago
C) Encompassing people, process, and technology
WI
Winfred
1 year ago
B) Facilitating system-wide visibility into the activities of critical user accounts
RE
Reyes
1 year ago
A) Collecting security events and correlating them to identify anomalies
KA
Kate
2 years ago
I agree, a holistic view of people, process, and technology is key for effective security monitoring.
LA
Lauryn
1 year ago
C) Encompassing people, process, and technology
DA
Danilo
1 year ago
A) Collecting security events and correlating them to identify anomalies
AL
Aleshia
1 year ago
C) Encompassing people, process, and technology
RE
Regenia
1 year ago
B) Facilitating system-wide visibility into the activities of critical user accounts
NI
Nina
1 year ago
A) Collecting security events and correlating them to identify anomalies
KA
Kallie
2 years ago
I see your point, Viola. But I still think B is the best option. Having system-wide visibility into critical user accounts is crucial for reducing risk.
GO
Goldie
2 years ago
Option C seems the most comprehensive approach to reducing risk through continuous security monitoring.
VI
Viola
2 years ago
I disagree, I believe the answer is C. Including people, process, and technology covers all bases.
EL
Eleonore
2 years ago
I think the answer is A, because correlating security events can help identify anomalies.