ExamGecko
Question list
Search
Search

Question 359 - CISM discussion

Report
Export

In a call center, the BEST reason to conduct a social engineering is to:

A.
Identify candidates for additional security training.
Answers
A.
Identify candidates for additional security training.
B.
minimize the likelihood of successful attacks.
Answers
B.
minimize the likelihood of successful attacks.
C.
gain funding for information security initiatives.
Answers
C.
gain funding for information security initiatives.
D.
improve password policy.
Answers
D.
improve password policy.
Suggested answer: A

Explanation:

The best reason to conduct a social engineering test in a call center is to identify candidates for additional security training because it helps to assess the level of awareness and skills of the call center staff in recognizing and resisting social engineering attacks, and provide them with the necessary training or education to improve their security posture. Minimizing the likelihood of successful attacks is not a reason to conduct a social engineering test, but rather a possible outcome or benefit of conducting such a test. Gaining funding for information security initiatives is not a reason to conduct a social engineering test, but rather a possible outcome or benefit of conducting such a test. Improving password policy is not a reason to conduct a social engineering test, but rather a possible outcome or benefit of conducting such a test.

Reference: https://www.isaca.org/resources/isaca-journal/issues/2017/volume-6/the-value-of-penetration-testing https://www.isaca.org/resources/isaca-journal/issues/2016/volume-5/security-scanning-versus-penetration-testing

asked 01/10/2024
Olive Wang
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first