A financial institution's incident response team is revising their playbook to specifically address incidents of wire-transfer fraud, which have become increasingly sophisticated. The playbook…

Question

Options

• Aintrusion detection systems to identify potential network breaches and VPNs for secure communication during the response
• Bencryption tools to secure financial data and client communication platforms for notifying affected parties
• Clegal management software for reporting to regulatory authorities and data visualization tools for analyzing transaction patterns
• Dtransaction monitoring systems to detect anomalies in wire transfers and forensic accounting tools to trace the source of fraud

• A
  3% (1)
• B
  8% (3)
• C
  17% (6)
• D
  72% (26)

Explanation

Option D is correct because the playbook's core steps - detecting fraudulent transactions and tracing the fraud source - map directly to transaction monitoring systems (which flag anomalies in wire transfers in real time) and forensic accounting tools (which reconstruct financial trails to identify the fraud's origin). These are purpose-built for financial fraud incidents, not generic IT security incidents.

Why the distractors fail:

• A targets network intrusion (a cybersecurity focus), not financial transaction fraud - IDS and VPNs don't analyze payment flows or trace money movement.
• B addresses data protection and client notification, which are secondary concerns; encryption tools don't detect or investigate fraud.
• C has the reporting tool right (legal/regulatory management), but data visualization is too generic - forensic accounting is the specific discipline needed to trace wire fraud, not just "visualizing patterns."

Memory tip: Match the tool to the threat. Wire-transfer fraud = follow the money, so you need tools that watch money move (transaction monitoring) and trace where it went (forensic accounting). Think "monitor + trace = D".

No community discussion yet for this question.