7.15 - Address Personnel Safety and Security Concerns CISSP Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An organization has implemented mandatory two-factor authentication (2FA) for all remote access. Help desk tickets have increased because users are receiving multiple push notifications and are approving them just to stop the prompts. Which measure would most effectively reduce 2FA fatigue while maintaining security?

   • AImplement number matching in push notifications so users must verify a displayed number before approving.
   • BIncrease the frequency of 2FA prompts to ensure users are always verified.
   • CAllow users to whitelist their home devices so 2FA is not required from those devices.
   • DSwitch to SMS-based one-time passcodes instead of push notifications.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the security professional's PRIMARY role during the response phase of emergency management?

   • ARestore systems and data from backups to resume business operations
   • BConduct a detailed post-incident review and document lessons learned
   • CEnsure the safety of personnel and coordinate with emergency services
   • DDevelop and update the emergency response plan based on the incident
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   How can social media usage by employees expose organizational information?

   • AEmployees may inadvertently share sensitive details about projects, clients, or internal systems
   • BSocial media posts are always publicly visible and cannot be restricted
   • CSocial media platforms automatically grant access to corporate networks
   • DSocial media usage consumes bandwidth, slowing down corporate networks
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company's CEO is traveling to a country with a high risk of political unrest. The security team has established a duress code word for the CEO to use in case of emergency. During a video call, the CEO says the code word casually. What should the security operations center (SOC) do?

   • ATreat the code word as a duress signal and initiate the emergency response protocol, including notifying the designated response team.
   • BIgnore the code word because it was said casually.
   • CImmediately contact local authorities to report a kidnapping.
   • DAsk the CEO to repeat the code word to confirm it was intentional.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A defense contractor discovers that employees are posting photos of their work badges and office interiors on social media. The company wants to reduce the risk of social engineering and physical security breaches. Which policy would be most effective?

   • AImplement a social media policy that prohibits sharing photos of badges, office interiors, and any information that could reveal security procedures.
   • BRequire employees to use separate personal and professional social media accounts.
   • CProhibit all social media use during work hours.
   • DMonitor employees' personal social media accounts and delete any photos that show the office.
   Reveal Solution Discussion Select an answer first