7.15 - Address Personnel Safety and Security Concerns CISSP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which strategy is MOST effective in preventing 2FA fatigue attacks?

   • AUsing SMS-based one-time passcodes instead of push notifications
   • BDisabling two-factor authentication for low-risk applications
   • CIncreasing the frequency of authentication prompts to keep users alert
   • DImplementing number matching in push notifications so users must verify a code displayed on the login screen
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company has a strict policy against sharing passwords. An employee is observed writing their password on a sticky note and placing it under their keyboard. The employee has been a top performer for years and has access to sensitive financial data. What is the most appropriate response?

   • AImmediately terminate the employee for violating the password policy.
   • BIssue a formal warning and require the employee to complete additional security awareness training.
   • CMonitor the employee's activities closely for any signs of malicious intent.
   • DRevoke the employee's access to sensitive financial data immediately.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A bank branch manager is trained to use a duress code word when forced to open the vault by a robber. During a robbery, the manager says the code word to the teller. What should the teller do?

   • AVerbally acknowledge the code word to the robber to show compliance.
   • BAttempt to physically disarm the robber to protect the manager.
   • CIgnore the code word because it is not part of the teller's training.
   • DImmediately activate the silent duress alarm and follow the branch's emergency response protocol.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is '2FA fatigue' in the context of authentication security?

   • AA type of denial-of-service attack that targets authentication servers
   • BA method used by attackers to guess a user's password and second factor
   • CA state where users become desensitized to repeated authentication prompts and may approve them without thinking
   • DA condition where the two-factor authentication system becomes overloaded and stops working
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which phase of emergency management involves actions taken to reduce the likelihood or impact of an emergency before it occurs?

   • ARecovery
   • BPrevention
   • CPreparedness
   • DResponse
   Reveal Solution Discussion Select an answer first