An attacker embedded a macro within a word processing file opened by a user in an organization's legal department. The attacker used this technique to gain access to confidential financial data…

The correct answer is A. controlled folder access C. signed macro requirements. To prevent macro-based attacks, the Cisco CyberOps study guide emphasizes the importance of limiting execution of unauthorized or unsigned macros. "Requiring that all macros be digitally signed and limiting execution only to those that meet the required trust level is a key…

Submitted by ricky.ec· Mar 6, 2026Incident Response Techniques

Question

An attacker embedded a macro within a word processing file opened by a user in an organization's legal department. The attacker used this technique to gain access to confidential financial data. Which two recommendations should a security expert make to mitigate this type of attack? (Choose two.)

Options

Acontrolled folder access
Bremovable device restrictions
Csigned macro requirements
Dfirewall rules creation
Enetwork access control

How the community answered

(42 responses)

A
69% (29)
B
19% (8)
D
7% (3)
E
5% (2)

Explanation

To prevent macro-based attacks, the Cisco CyberOps study guide emphasizes the importance of limiting execution of unauthorized or unsigned macros. "Requiring that all macros be digitally signed and limiting execution only to those that meet the required trust level is a key mitigation strategy against malicious macros." Additionally, enabling features like Controlled Folder Access helps in protecting sensitive directories from unauthorized changes by untrusted applications, including those launched via malicious macros . These two measures--enforcing signed macro policies and leveraging controlled folder access-- directly help in mitigating the risk posed by embedded malicious macros in documents.

Topics

#macro security#malware mitigation#endpoint security#access control

Community Discussion

No community discussion yet for this question.

Full 300-215 Practice