MENU
A continuous information security monitoring program can BEST reduce risk through which of the following?
Suggested Answer: B
Get Premium HCISPP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
19 comments · newest first
MI
Minna
10 months ago
Wait, can a monitoring program really cover everything? Sounds too good to be true!
LA
Lanie
10 months ago
Logging changes (D) is good, but it feels more reactive than proactive.
SH
Sharita
10 months ago
I think C is crucial too, can't ignore the people and processes!
ED
Edward
10 months ago
B seems important, but I’m not sure it’s the best option here.
BE
Becky
11 months ago
A is definitely the best choice for spotting issues early.
AR
Arlene
11 months ago
I vaguely recall that logging changes is important for audits, but I’m not convinced that option D is the best way to reduce risk overall.
KE
Kenny
11 months ago
I feel like option C is the most comprehensive since it covers people, processes, and technology, but I’m not confident if it directly reduces risk.
YU
Yun
11 months ago
I remember a practice question where we discussed the importance of visibility into user accounts, so option B could also be a strong contender.
ER
Erinn
12 months ago
I think option A makes sense since identifying anomalies is crucial for spotting potential threats, but I'm not entirely sure if it's the best choice.
OZ
Ozell
12 months ago
This is a tricky one. I feel like I know the concepts, but translating them to the specific wording of the question is challenging. I'm leaning towards option A, but I'm not 100% confident. Maybe I'll eliminate a couple options first before making my final decision.
LA
Lavelle
12 months ago
Okay, let me think this through. A continuous monitoring program needs to cover people, processes, and technology, so option C seems like a good choice. But I'm also wondering if option B about visibility into critical user accounts could be important too. I'll have to weigh the pros and cons of each.
AR
Arlene
1 year ago
Hmm, I'm a bit unsure about this one. I know continuous monitoring is important for reducing risk, but I'm not sure which of these options is the BEST approach. I might need to review my notes on the different components of a monitoring program.
HO
Hoa
1 year ago
This looks like a pretty straightforward question. I think the key is to focus on the term "continuous information security monitoring program" and what that entails. I'd go with option A - collecting security events and correlating them to identify anomalies.
GI
Gilma
1 year ago
That makes sense, Tayna. It's important to monitor both scheduled and unscheduled changes for security purposes.
TA
Tayna
1 year ago
I see your point, James. But I think the answer is D, because logging system changes can help track any unauthorized activities.
JA
James
1 year ago
I disagree, I believe the answer is C, because it involves all aspects of security - people, process, and technology.
LA
Lauryn
1 year ago
Option C sounds like the most comprehensive approach to me. Security is a holistic endeavor, not just a technical one.
OD
Odelia
1 year ago
A: I agree, option C covers all aspects of security.
GI
Gilma
1 year ago
I think the answer is A, because correlating security events can help identify anomalies.