CISM: Certified Information Security ManagerDemo

By Isaca · Question Mode

QuestionQ931

Information Security Program

A spear-phishing attack tricked a user into installing a Trojan on a workstation. Which of the following would have been MOST effective at preventing the attack from succeeding?

  • A Application control
  • B Website blocking
  • C Internet filtering
  • D Network encryption
Explanation

Application control restricts execution to approved or trusted software, preventing an unapproved Trojan from running on the workstation. Microsoft describes App Control as enforcing an explicit list of allowed software and identifies it as an effective control against executable-file malware.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!