GIAC Exam GCED Topic 4 Question 51 Discussion

Actual exam question for GIAC's GCED exam

Question #: 51
Topic #: 4

[All GCED Questions]

Which control would BEST help detect a potential insider threat?

AMandatory approval process for executive and administrative access requests.

BProviding the same access to all employees and monitoring sensitive file access.

CMultiple scheduled log reviews of all employee access levels throughout the year

DRequiring more than one employee to be trained on each task or job duty.

Show Suggested Answer

Suggested Answer: C

by Amalia at Sep 18, 2024, 11:23 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

2 days ago

Multiple log reviews throughout the year in option C sounds like a good way to stay on top of access issues.

upvoted 0 times

...

9 days ago

I'm not sure about B - giving everyone the same access and just monitoring doesn't seem secure enough to me.

upvoted 0 times

...

13 days ago

Option A seems like the best way to control who has administrative access and prevent insider threats. Mandatory approvals are key.

upvoted 0 times

...

14 days ago

I see your point, Remedios. But I think option D could also be helpful as it ensures more than one employee is trained on each task.

upvoted 0 times

...

20 days ago

I disagree, I believe option C would be more effective because it involves regular monitoring of employee access levels.

upvoted 0 times

...

23 days ago

I think option A would be the best control for detecting insider threats.

upvoted 0 times

...