Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
This question is actually trickier than it looks like on the first glance. Someone important fell for a spear-phishing attack which led to his MFA code (I guess OTP) being compromised. So the goal is to select the answer that will address this issue in the future - phishing emails reaching mailboxes of users. Based purely on that, the answer should be option D. However, if "compromised MFA code" means that the entire MFA system was compromised (code that is generating OTPs), then option A would be the most adequate. Maybe I'm overthinking here, but that's just my train of thought...
A. Communicate the threat to users.