MENU
Which of these is a defense-in-depth strategy principle?
Suggested Answer: C
Get Premium 200-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Defense-in-depth is a layered security strategy that aims to protect information and resources through multiple security measures.
One of its key principles is the concept of least privilege, which means providing users and systems with the minimum level of access necessary to perform their job functions.
By assigning only the necessary permissions, the attack surface is reduced, and the potential damage from a compromised account or system is minimized.
This principle helps in mitigating the risk of unauthorized access and limits the capabilities of an attacker if they gain access to an account.
Defense-in-Depth Strategy by NIST
Principle of Least Privilege in Cybersecurity
Layered Security Approach Explained
40 comments · newest first
PR
Precious
11 months ago
C is good, but B is the real principle for defense-in-depth.
KA
Kate
11 months ago
Wait, disabling admin accounts? That sounds risky!
LE
Leslie
11 months ago
A is totally irrelevant here.
MO
Monroe
11 months ago
I thought it was C, but B makes sense too.
SU
Suzan
12 months ago
Definitely B, least privileges is key!
AA
Aaron
12 months ago
Disabling admin accounts sounds like a good practice, but I don't recall if that's specifically a defense-in-depth principle.
CH
Charlette
1 year ago
I practiced a question similar to this, and I feel like option C makes sense since it talks about permissions for job functions.
EF
Effie
1 year ago
I remember something about least privilege being important in network security, so maybe it's option B?
FR
Freeman
1 year ago
I think defense-in-depth is about layering security, but I'm not sure which option fits that best.
CH
Cherri
1 year ago
Ah, I remember learning about defense-in-depth in class. It's all about having multiple layers of security to protect against different types of threats. I think option B, "Assign the least network privileges to segment network permissions," is the best answer here. That sounds like it aligns with the defense-in-depth principle.
CO
Coral
1 year ago
I'm a little confused by this question. None of these options seem like they're directly related to the defense-in-depth strategy. I might have to guess on this one or try to eliminate the options that are clearly not correct.
IN
India
1 year ago
Okay, let's see. Defense-in-depth is about having redundant security controls, right? I think option B, "Assign the least network privileges to segment network permissions," sounds like it could be the right answer. I'll mark that one down.
RO
Rozella
1 year ago
Hmm, I'm a bit unsure about this one. I know defense-in-depth is about having multiple layers of security, but I'm not sure which of these options best fits that description. I'll have to think it through carefully.
HE
Helene
1 year ago
This one seems pretty straightforward. I'm pretty sure the defense-in-depth strategy principle is about assigning the least network privileges to segment network permissions.
LI
Lisha
1 year ago
This seems pretty straightforward - short-term portfolios are made up of assets with maturities under a year to meet liquidity needs. I'm pretty confident option C is the right answer.
JO
Jolanda
1 year ago
Cloud Endpoints seems like the obvious choice here. It's specifically designed for building and managing RESTful APIs, which is exactly what HipLocal needs for their public APIs. I'm confident this is the right answer.
MA
Mauricio
2 years ago
D seems like the odd one out here. Disabling admin accounts? That's just basic, not defense-in-depth.
LI
Lindsey
2 years ago
B) Assign the least network privileges to segment network permissions.
DA
Dalene
2 years ago
A) identify the minimum resource required per employee.
DO
Dominga
2 years ago
I think D) is important too, but C) is more about limiting access to what's necessary.
MA
Matthew
2 years ago
Haha, I bet the answer is 'all of the above'. Security people love layering on the controls!
ER
Ernest
2 years ago
D) Disable administrative accounts to avoid unauthorized changes.
TH
Thaddeus
2 years ago
C) Provide the minimum permissions needed to perform Job functions.
DA
Dannette
2 years ago
B) Assign the least network privileges to segment network permissions.
JU
Judy
2 years ago
A) identify the minimum resource required per employee.
MA
Marica
2 years ago
I'm not sure, but D) Disable administrative accounts also sounds like a good defense strategy.
IR
Iraida
2 years ago
I agree with Eladia, C) makes sense for defense-in-depth strategy.
HY
Hyun
2 years ago
I'm going with C. Giving the minimum permissions needed is a classic security principle.
KI
Kiley
2 years ago
Assigning the least network privileges can also help in segmenting network permissions.
LA
Laurel
2 years ago
I think disabling administrative accounts is also important to prevent unauthorized changes.
VI
Vincent
2 years ago
I agree, giving minimum permissions is crucial for security.
DE
Desmond
2 years ago
C and D both sound like good strategies to me.
DO
Dominque
2 years ago
I think D is also important, disabling admin accounts can prevent unauthorized changes.
HA
Haley
2 years ago
I agree, C is definitely a key defense-in-depth strategy principle.
EL
Eladia
2 years ago
I think the answer is C) Provide the minimum permissions needed to perform Job functions.
SH
Shaun
2 years ago
I think B is the right answer. Segmenting network permissions is a key part of defense-in-depth.
IR
Ira
2 years ago
It's important to consider all these principles for a strong defense-in-depth strategy.
BE
Beckie
2 years ago
D is also a good strategy, disabling administrative accounts can prevent unauthorized changes.
AN
Annice
2 years ago
I think C is also important, providing minimum permissions needed for job functions.
NO
Noel
2 years ago
I agree, segmenting network permissions is crucial for defense-in-depth.