exam questions

Exam CISA All Questions

View all questions & answers for the CISA exam

Exam CISA topic 1 question 1655 discussion

Actual exam question from Isaca's CISA
Question #: 1655
Topic #: 1
[All CISA Questions]

Which of the following attack types is MOST effectively addressed by an organization's security awareness program?

  • A. Man-in-the-middle
  • B. Phishing
  • C. Structured query language (SQL) injection
  • D. Distributed denial of service (DDoS)
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
46080f2
2 days, 21 hours ago
Selected Answer: B
Phishing attacks often target users at all levels of the organisation, and every security awareness program should include specific antiphishing campaigns designed to help users recognise suspicious requests and respond appropriately. These campaigns often involve the use of phishing simulations, which send users fake phishing messages to test their skills. Users who click on the simulated phishing message are sent to a training program designed to help them better recognise fraudulent messages." This directly links security awareness programs and specific campaigns to addressing phishing attacks.
upvoted 1 times
...
Pokekai90
5 months, 1 week ago
Selected Answer: B
Option B, regular phishing exercise keep the employees to stay vigilant.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago