Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
In real world definitely correct answer is B, but from CISM exam perspective and how they frame it we should go for A
Phishing attacks are most commonly delivered through email. An email filtering solution helps prevent phishing messages from ever reaching users. Because it acts before users interact with the email, email filtering is one of the most effective preventive controls against phishing. If the exam option had been "security awareness training" instead of "security strategy training," the question would be more debatable. Security Strategy Training not a standard information security term.
Even an imperfect email filter would catch most phishing attempts