FRM Part II · FRM Exam Part II · Risk Mitigation
A bank's security team wants a control that ensures a compromised employee credential cannot, by itself, give an attacker access to the online treasury platform. Which control most directly addresses this specific weakness?
Multi-factor authentication is the best answer because it requires a second independent factor beyond the password. A stolen credential alone then cannot unlock the treasury platform. The other options are awareness, testing or recovery measures and do not directly prevent access with a compromised credential.
- AMulti-factor authentication for access to the platformCorrect
- BQuarterly security awareness newsletters
- CAnnual penetration test of the perimeter firewall
- DDaily offsite backup of platform data
Explanation
Multi-factor authentication requires a second independent factor, so a stolen password alone does not grant access. Awareness newsletters and penetration tests are not direct preventive barriers to credential misuse, and backups are recovery controls that do not stop unauthorized access.
Did you get it right without looking?
One question tells you little. A timed set on Risk Mitigation shows your real accuracy, how long you take and where you lose marks.
More Risk Mitigation questions
- A bank assesses a process with inherent annual expected loss of USD 8.0 million. Two independent controls each reduce the loss frequency by …
- Which feature best distinguishes a preventive control from a detective control in operational risk mitigation?
- A bank discovers that its critical vendor relies on a subcontractor (a fourth party) to host client data. What is the most appropriate respo…
- A bank estimates a ransomware event has an annual probability of 10% and an expected loss of USD 20 million per event. A proposed control su…
- Which testing approach best demonstrates that a firm can actually remain within its impact tolerances for an important business service duri…
- A bank's payments unit identifies that a manual reconciliation step causes frequent errors. Management decides to automate the step and add …