CISSP 2023 Practice Questions (Scenario-Based) - Domain 4 : Communication and Network Security

Communication and Network Security is the Fourth domain of the CISSP certification. It accounts for approximately 13% of the exam questions. Securing information systems, communications, and network security are fundamental elements of this corner of Information Security. Whether it be micro-segmentation, Wi-Fi networks or even a user’s voice, communication and network security underpin information system security.
CISSP Flash Cards - • CISSP Flash Cards: Mas...
CISSP Practice Questions Playlist - youtu.be/playl...
Domain 1 - • CISSP 2023 Practice Qu...
Domain 2 - • CISSP 2023 Practice Qu...
Domain 3 - • CISSP 2023 Practice Qu...
Domain 4 - • CISSP 2023 Practice Qu...
#CISSP #CISSPDomain4 #Cybersecurity #InfoSec #Certification #ExamPrep
🌐 Follow us on Twitter: / infoscguardian
📷 Follow us on Instagram: / infosecguardians
👍 Like us on Facebook: / 623146913044461
🌐 Linkedin: / infosecguardians

[@yahumamahesh]

Excellent

[@avalanche240]

I low key disagree with the answer on question 2. The employees already were reporting suspicion of the emails.

[@InfoSecGuardians]

That's a fair point.
Given that the employees are already reporting suspicious emails, the most immediate need might be to block known phishing emails using email content filtering (option A). However, conducting security awareness training (option C) remains crucial for improving the overall security posture and empowering employees to identify and respond to phishing attempts effectively in the long term.
Hence a CISSP - Think Like a Manager - response would be Option C.
Do Remember - The Biggest threat and Toughest Defense in any Organization are their employees.

[@hufflepuffsunited7827]

I would also add that option A would only be effective in blocking known phishing email addresses and not new ones that may pop-up. Option D in this case makes the most sense