Which of the Following Sets of Controls Should Allow an Investigation

question 211

Multiple Choice

Which of the following sets of controls should allow an investigation if an attack is not blocked by preventive controls or detected by monitoring?

• A) Logging and audit trail controls to enable forensic analysis
• B) Security incident response lessons learned procedures
• C) Security event alert triage done by analysts using a Security Information and Event Management (SIEM) system
• D) Transactional controls focused on fraud prevention

---

Definitions:

Emotional Lability

The propensity for rapid, often unpredictable changes in emotion.

Correspondent Inference

A theory suggesting that people infer the motives and dispositions of others from observable behaviors, especially if the behaviors are unexpected.

Causal Inference

The process of determining the cause-and-effect relationship between variables, typically assessed through controlled experiments or observational studies.

Cognitive Heuristics

Shortcuts or rules of thumb that the mind uses to quickly form judgments and make decisions.