CISM: Certified Information Security ManagerDemo

Question

Which of the following is the BEST technical safeguard against unauthorized corporate-network access gained through social engineering?

A Requiring multifactor authentication
B Requiring challenge/response information
C Enforcing frequent password changes
D Enforcing complex password formats

Explanation

Multifactor authentication requires an additional factor beyond a password, reducing the chance that socially engineered or stolen credentials alone can be used to access the corporate network.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ658

Community Discussion