Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I would go with answer B. Answer D is more about prevention than detection
Answer should be "D". The key word in the question is "detect" incidents. A. speaks to incident response (not detection). B. again speaks to response (not detection). C. again speaking to incident response (not detection). D. "threat awareness and timely reporting" speaks to detection.
End-user education primarily enhances awareness and reporting, but it relies heavily on the vigilance and knowledge of individuals, which can vary greatly and may not always be reliable. Regular testing helps identify gaps in the incident response program, including detection capabilities. Testing ensures not only that incidents are detected but also that the organisation is ready to respond effectively.