Free Preparation Discussions
MENU
PeopleCert ITIL 4 Specialist High velocity IT Exam - Topic 3 Question 31 Discussion
Topic #: 3
An organization experienced a security attack. A hacker accessed a system using login information gathered from social media sites. The incident was identified quickly and systems were restored without significant loss.
Which type of control should be improved?
The scenario says the attack was identified quickly and systems were restored without significant loss. That means detection and corrective response were relatively effective. The weakness was that the attacker was able to gain access in the first place.
Therefore, the type of control needing improvement is prevention. This could include stronger identity protection, user awareness, multi-factor authentication, credential monitoring, and better social engineering resistance.
D is correct because the issue occurred before the detection stage; the preventive safeguards were insufficient.
=========
Kerrie
5 days agoHolley
10 days agoPaul
15 days agoLaurel
21 days agoKerry
26 days agoKimberely
1 month agoScot
1 month agoZona
1 month agoMerlyn
2 months agoJules
2 months agoOzell
2 months agoTu
2 months ago