An Organization Has the Following Written Policies: Users Must Request

question 454

Multiple Choice

An organization has the following written policies: Users must request approval for non-standard software installation. Administrators will perform all software installations. Software must be installed from a trusted repository. A recent security audit identified crypto-currency software installed on one user's machine. There are no indications of compromise on this machine. Which of the following is the MOST likely cause of this policy violation and the BEST remediation to prevent a reoccurrence?

• A) The user's machine was infected with malware; implement the organization's incident response
• B) The user installed the software on the machine; implement technical controls to enforce the written policies
• C) The crypto-currency software was misidentified and is authorized; add the software to the organization's approved list
• D) Administrators downloaded the software from an untrusted repository; add a policy that requires integrity checking for all software.

---

Definitions:

Operating Income

The profit earned from a company's core business operations, excluding deductions of interest and tax.

Variable Costing

The concept that considers the cost of products manufactured to be composed only of those manufacturing costs that increase or decrease as the volume of production rises or falls (direct materials, direct labor, and variable factory overhead).

Absorption Costing

An accounting method that includes all of the manufacturing costs in the cost of a product, including direct materials, direct labor, and both variable and fixed manufacturing overhead.

Margin of Safety

The difference between actual or projected sales and the break-even sales level, used to assess risk.