CISM Question 46

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose D1

  Screening prospective employees thoroughly before hiring is a crucial step in preventing deliberate internal security breaches. Background checks, reference checks, and a comprehensive vetting process help organizations identify potential employees with a history of dishonesty, criminal behavior, or other factors that could pose a risk to security. While options like a well-designed intrusion detection system (IDS), biometric security access control, and a well-designed firewall system are important components of an overall security strategy, they are primarily focused on detecting and preventing unauthorized access or external threats. Screening prospective employees addresses the human element and helps ensure that individuals with malicious intentions are less likely to be granted access to sensitive information and systems within the organization.

• Chose A1

  Screening is one time activity. It will sotp disgruntled employee to harm the network. Therefore strong IDS is best option to detect.

• 1

  IDS doesn't stop anything, it only reports. IPS does the stopping. But even then, the BEST answer here is background screening.