A Chief Security Officer (CSO) Is Reviewing the Organization's Incident

question 213

Multiple Choice

A Chief Security Officer (CSO) is reviewing the organization's incident response report from a recent incident. The details of the event indicate: A user received a phishing email that appeared to be a report from the organization's CRM tool. The user attempted to access the CRM tool via a fraudulent web page but was unable to access the tool. The user, unaware of the compromised account, did not report the incident and continued to use the CRM tool with the original credentials. Several weeks later, the user reported anomalous activity within the CRM tool. Following an investigation, it was determined the account was compromised and an attacker in another country has gained access to the CRM tool. Following identification of corrupted data and successful recovery from the incident, a lessons learned activity was to be led by the CSO. Which of the following would MOST likely have allowed the user to more quickly identify the unauthorized use of credentials by the attacker?

• A) Security awareness training
• B) Last login verification
• C) Log correlation
• D) Time-of-check controls
• E) Time-of-use controls
• F) WAYF-based authentication

---

Definitions:

Demand

Refers to the quantity of a product or service that consumers are willing and able to purchase at various prices over a given period of time.

Supply

The total quantity of a product or service that is available to consumers at a given price level.

Wage Increase

The rise in the hourly, daily, or monthly pay rate for workers, often sought after by employees and unions.

Employment in Steel Industry

Refers to the workforce engaged in the production and processing of steel, an important sector for many economies.