Exam CRISC topic 1 question 653 discussion

D. Intrusion Detection System An Intrusion Detection System (IDS) is designed to monitor network and/or system activities for malicious exploits or security breaches. It is one of the most effective measures against external threats trying to gain unauthorized access to an organization's confidential information. Option A (Single sign-on) is more about user convenience and reducing password fatigue rather than directly protecting against external threats. Option B (Strong authentication) is effective in ensuring that only authorized individuals can access systems but is not specifically tailored to combat external threats like an IDS. Option C (Data integrity checking) ensures that data has not been altered but does not necessarily protect against the initial intrusion where confidential data can be accessed. Therefore, an IDS is the most effective against external threats aimed at compromising confidential information.

B. Strong authentication Strong authentication is the most effective measure against external threats to an organization's confidential information. Strong authentication typically involves the use of multiple factors to verify a user's identity, such as something the user knows (e.g., a password), something the user has (e.g., a smart card or token), and something the user is (e.g., biometric data like a fingerprint or facial recognition). This multi-factor approach significantly enhances security by making it much more difficult for unauthorized individuals to gain access to confidential information, even if they possess some of the authentication factors.

It should be D. the question is talking about external threat. strong authentication can also prevent internal threat. I go with D since external threat can be detected using IDS

It is B.

should be B

An IDS is a detective control that is not effective for the purpose of the question.

D is not valid with zero trust security. It’s also only detective, not preventative. should be b

Why not Strong Authentication control?