Exam CISM topic 1 question 702 discussion

All of the options listed can be useful in protecting against advanced persistent threats (APTs), but the BEST method to protect against emerging APT actors depends on the specific situation and the organization's security needs. That being said, option D, implementing proactive systems monitoring, is generally considered a critical security measure in protecting against APTs. APT actors are known for their ability to evade detection and persist within a system for long periods of time, making proactive monitoring a key defense. This approach involves monitoring system logs, network traffic, and other sources of information to detect potential threats before they can cause damage.

I go for option D. Proactive system monitoring is a way of describing active threat hunting. Threat hunting is conducted based on latest threat intel, specifically sourced for the own organization, therefore yielding high applicability.

D. the answer A talks about Incident Response plan, not training to the whole company...

D. Implementing proactive systems monitoring

A. Providing ongoing training to the incident response team is the best method to protect against emerging advanced persistent threat (APT) actors. APT actors are highly skilled and motivated attackers who use sophisticated techniques to compromise organizations' networks and exfiltrate sensitive data. To effectively protect against these types of threats, it's important to have a well-trained incident response team that is able to quickly detect, respond to, and contain APT attacks. Ongoing training ensures that the incident response team is always up-to-date with the latest threat intelligence and has the knowledge and skills needed to effectively defend against APT actors.