Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 ISSMP Exam - Topic 3 Question 14 Discussion

Posted by Angella on May 04, 2022 at 07:57 AM

Which of the following methods can be helpful to eliminate social engineering threat?

Each correct answer represents a complete solution. Choose three.

Suggested Answer: A, B, D

The following methods can be helpful to eliminate social engineering threat.

Password policies

Vulnerability assessments

Data classification

Password policy should specify that how the password can be shared.

Company should implement periodic penetration and vulnerability assessments. These assessments usually consist of using known hacker tools and common hacker techniques to breach a network security. Social engineering should also be used for an accurate assessment.

Since social engineers use the knowledge of others to attain information, it is essential to have a data classification model in place that all employees know and follow. Data classification assigns level of sensitivity of company information. Each classification level specifies that who can view and edit data, and how it can be shared.


Get Premium ISSMP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
13 comments · newest first
DE
Dean 11 months ago
Wait, how does data classification even relate to social engineering?
BE
Belen 12 months ago
Agreed, password policies are key!
JO
Joaquin 12 months ago
Vulnerability assessments? Not sure that helps with social engineering.
CH
Cheryl 12 months ago
I think data encryption is a must too.
MA
Mariann 1 year ago
Definitely password policies!
AL
Alverta 1 year ago
I practiced a similar question where data classification was mentioned, but I’m uncertain if it directly prevents social engineering. I feel like I need to double-check that one.
PA
Paris 1 year ago
I think data encryption is definitely one of the answers, but I can't recall if data classification is also a strong method against social engineering threats.
AR
Arthur 1 year ago
I remember discussing how password policies can help, but I'm not sure if they are enough on their own against social engineering.
CH
Charlena 1 year ago
Vulnerability assessments seem more related to technical threats, but I guess they could help identify weaknesses that social engineers might exploit?
HA
Hailey 1 year ago
This looks like a straightforward question about the IDS/IPS mode of the MX Security Appliance. I'll carefully review the options and choose the one that best matches the information provided in the image.
KE
Keva 1 year ago
I hesitated between A and B. I know financial accounting deals with external reporting, but isn't management accounting more about internal decisions?
EL
Eliseo 1 year ago
Hmm, I'm not too sure about this one. I'll need to review the Tanzu product descriptions again to be confident in my answer.
CA
Carolynn 1 year ago
I'm a bit confused on this one. The question is asking about forwarding multicast traffic, but the options seem to be more about controlling group membership. I'm not entirely sure which one is the right answer.
0/2000 characters

Save Cancel