Examkin

Soru

Zorluk: KolaySecurity Awareness Programs and Human Risk Management

A security administrator discovers that members of the financial operations team are being targeted by fraudulent wire transfer requests disguised as emails from executive leadership. Which of the following represents the most effective human risk management control to mitigate this threat?

  1. Conducting role-based security training focused on out-of-band transaction verification proceduresCevap
  2. B
    Deploying network firewalls to filter database query traffic
  3. C
    Reclassifying the enterprise security policy as a deterrent physical control
  4. D
    Providing mandatory training on identifying voice-based vishing over mobile phones

Cevap

Conducting role-based security training focused on out-of-band transaction verification procedures
Role-based security awareness training provides targeted instruction tailored to specific job responsibilities. For employees handling financial transfers, training them on out-of-band verification (confirming requests through a separate, trusted channel) directly addresses human risk associated with Business Email Compromise (BEC) attacks.

Adım Adım Çözüm

1
Analyze the threat vector described in the scenario
Identified a Business Email Compromise (BEC) attack targeting financial staff via spoofed executive emails.
Understanding the specific attack vector is essential to selecting an appropriate control.
2
Evaluate human risk mitigation options
Selected role-based security awareness training that addresses the specific business process (wire transfers) and emphasizes out-of-band verification.
General or mismatched training does not build the specific operational safeguards needed by high-risk job roles.

Anahtar Kavram

Role-Based Security Awareness Training
Bu soruyu puanla

Konular

Security Awareness Programs and Human Risk Management

Bu konudan daha fazla soru