CISSP 2023 Practice Questions (Scenario-Based) - Domain 4 : Communication and Network Security

[@alaaelbe7753]

Very impressive presentation

[@yahumamahesh]

Excellent

[@anupanu-yc5kq]

Not agreeing with Q3 answer.. A CDN can significantly enhance the network’s resilience to DDoS attacks by distributing traffic across multiple servers, making it harder for attackers to overwhelm a single point of failure. CDNs are designed to handle large amounts of traffic and have built-in capabilities to absorb traffic spikes, including those caused by DDoS attacks. This reduces the burden on the company’s core infrastructure, IDPS can play a role in detecting abnormal traffic patterns and blocking known attack vectors. However, IDPS alone may not be able to handle the volume and scale of DDoS traffic, especially if the attack overwhelms the network at a volume larger than the IDPS can process.

[@avalanche240]

I low key disagree with the answer on question 2. The employees already were reporting suspicion of the emails.

[@InfoSecGuardians]

That's a fair point. Given that the employees are already reporting suspicious emails, the most immediate need might be to block known phishing emails using email content filtering (option A). However, conducting security awareness training (option C) remains crucial for improving the overall security posture and empowering employees to identify and respond to phishing attempts effectively in the long term. Hence a CISSP - Think Like a Manager - response would be Option C. Do Remember - The Biggest threat and Toughest Defense in any Organization are their employees.

[@hufflepuffsunited7827]

I would also add that option A would only be effective in blocking known phishing email addresses and not new ones that may pop-up. Option D in this case makes the most sense