CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1827

Risk Response and Reporting

Which of the following is the BEST method for managing the risk associated with malicious actions carried out by database administrators (DBAs)?

  • A Activity logging and monitoring
  • B Awareness training and background checks
  • C Two-factor authentication
  • D Periodic access review
Explanation

Activity logging and monitoring record and review privileged DBA actions, creating accountability and enabling timely detection, investigation, and response to malicious or unauthorized activity performed through legitimate administrator access.

Community Discussion

No comments yet. Be the first to start the discussion!