Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA CySA+ Cybersecurity Analyst · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The other answers don't address the root cause: employees being tricked into helping attackers.
While I agree that A should be the answer as a whole. I must point out a flaw in the question itself. I hate to go all "english major" on this question, but the use of the word "entice" actually implies that the employees are being attracted or tempted by an offering of "pleasure, wealth, or advantage" in order to help the attackers. (im using the dictionary definition of entice in this case) The use of the word "entice" denotes that the employee is AWARE that they are helping an attacker in that moment. Based on how the question is worded, they are NOT being tricked.
Had to break the comment into two parts since it wouldnt let me post it all as one. To continue my previous thought, even if you train someone, if the person is the type that is going to be tempted to download something for monetary and run it for significant moneratary gain, theyre going to do it anyway, regardless of sufficient training or not. A strong arguement could be made for B because of the fact that the question implies that the employees are being bribed into assisting the attacker. Thus if the main problem is that the company cant trust the integrity of their employees they should block the malicious website. Perhaps the writer of this question didnt know what the word "enticed" means.