A company has gone through a round of phishing attacks. More than 200 users have had their workstation infected because they clicked on a link in an email. An incident analysis has determined an executable ran and compromised the administrator account on each workstation. Management is demanding the information security team prevent this from happening again.
Which of the following would BEST prevent this from happening again?
A. Antivirus
B. Patch management
C. Log monitoring
D. Application whitelisting
E. Awareness training
How to PASS CAS-004 in First Attempt?FULL Printable PDF and Software. VALID exam to help you PASS. |
 |
D. Application whitelisting
IMO the only way to avoid this kind of attack is “D – Application whitelisting. Using this, only authorized apps would be able to run and certainly those malware wouldn’t be authorized.
Antivirus may fail and awareness training, although very important, would MITIGATE it, but still some users would click and get infected.
https://vceguide.com/which-of-the-following-would-best-prevent-this-from-happening-again/#comment-40835