Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Cisco 200-201 Exam - Topic 3 Question 91 Discussion

Which of these is a defense-in-depth strategy principle?
C) Provide the minimum permissions needed to perform Job functions.
A) identify the minimum resource required per employee.
B) Assign the least network privileges to segment network permissions.
D) Disable administrative accounts to avoid unauthorized changes.

Cisco 200-201 Exam - Topic 3 Question 91 Discussion

Actual exam question for Cisco's 200-201 exam
Question #: 91
Topic #: 3
[All 200-201 Questions]

Which of these is a defense-in-depth strategy principle?

Show Suggested Answer Hide Answer
Suggested Answer: C

Defense-in-depth is a layered security strategy that aims to protect information and resources through multiple security measures.

One of its key principles is the concept of least privilege, which means providing users and systems with the minimum level of access necessary to perform their job functions.

By assigning only the necessary permissions, the attack surface is reduced, and the potential damage from a compromised account or system is minimized.

This principle helps in mitigating the risk of unauthorized access and limits the capabilities of an attacker if they gain access to an account.


Defense-in-Depth Strategy by NIST

Principle of Least Privilege in Cybersecurity

Layered Security Approach Explained

by Marguerita at Jul 06, 2024, 07:00 AM

Limited Time Offer

25%

Off

Get Premium 200-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Precious
9 months ago
C is good, but B is the real principle for defense-in-depth.
upvoted 0 times
...
Kate
9 months ago
Wait, disabling admin accounts? That sounds risky!
upvoted 0 times
...
Leslie
10 months ago
A is totally irrelevant here.
upvoted 0 times
...
Monroe
10 months ago
I thought it was C, but B makes sense too.
upvoted 0 times
...
Suzan
10 months ago
Definitely B, least privileges is key!
upvoted 0 times
...
Aaron
10 months ago
Disabling admin accounts sounds like a good practice, but I don't recall if that's specifically a defense-in-depth principle.
upvoted 0 times
...
Charlette
11 months ago
I practiced a question similar to this, and I feel like option C makes sense since it talks about permissions for job functions.
upvoted 0 times
...
Effie
11 months ago
I remember something about least privilege being important in network security, so maybe it's option B?
upvoted 0 times
...
Freeman
11 months ago
I think defense-in-depth is about layering security, but I'm not sure which option fits that best.
upvoted 0 times
...
Cherri
11 months ago
Ah, I remember learning about defense-in-depth in class. It's all about having multiple layers of security to protect against different types of threats. I think option B, "Assign the least network privileges to segment network permissions," is the best answer here. That sounds like it aligns with the defense-in-depth principle.
upvoted 0 times
...
Coral
11 months ago
I'm a little confused by this question. None of these options seem like they're directly related to the defense-in-depth strategy. I might have to guess on this one or try to eliminate the options that are clearly not correct.
upvoted 0 times
...
India
11 months ago
Okay, let's see. Defense-in-depth is about having redundant security controls, right? I think option B, "Assign the least network privileges to segment network permissions," sounds like it could be the right answer. I'll mark that one down.
upvoted 0 times
...
Rozella
11 months ago
Hmm, I'm a bit unsure about this one. I know defense-in-depth is about having multiple layers of security, but I'm not sure which of these options best fits that description. I'll have to think it through carefully.
upvoted 0 times
...
Helene
11 months ago
This one seems pretty straightforward. I'm pretty sure the defense-in-depth strategy principle is about assigning the least network privileges to segment network permissions.
upvoted 0 times
...
Lisha
11 months ago
This seems pretty straightforward - short-term portfolios are made up of assets with maturities under a year to meet liquidity needs. I'm pretty confident option C is the right answer.
upvoted 0 times
...
Jolanda
11 months ago
Cloud Endpoints seems like the obvious choice here. It's specifically designed for building and managing RESTful APIs, which is exactly what HipLocal needs for their public APIs. I'm confident this is the right answer.
upvoted 0 times
...
Mauricio
2 years ago
D seems like the odd one out here. Disabling admin accounts? That's just basic, not defense-in-depth.
upvoted 0 times
Lindsey
2 years ago
B) Assign the least network privileges to segment network permissions.
upvoted 0 times
...
Dalene
2 years ago
A) identify the minimum resource required per employee.
upvoted 0 times
...
...
Dominga
2 years ago
I think D) is important too, but C) is more about limiting access to what's necessary.
upvoted 0 times
...
Matthew
2 years ago
Haha, I bet the answer is 'all of the above'. Security people love layering on the controls!
upvoted 0 times
Ernest
2 years ago
D) Disable administrative accounts to avoid unauthorized changes.
upvoted 0 times
...
Thaddeus
2 years ago
C) Provide the minimum permissions needed to perform Job functions.
upvoted 0 times
...
Dannette
2 years ago
B) Assign the least network privileges to segment network permissions.
upvoted 0 times
...
Judy
2 years ago
A) identify the minimum resource required per employee.
upvoted 0 times
...
...
Marica
2 years ago
I'm not sure, but D) Disable administrative accounts also sounds like a good defense strategy.
upvoted 0 times
...
Iraida
2 years ago
I agree with Eladia, C) makes sense for defense-in-depth strategy.
upvoted 0 times
...
Hyun
2 years ago
I'm going with C. Giving the minimum permissions needed is a classic security principle.
upvoted 0 times
Kiley
2 years ago
Assigning the least network privileges can also help in segmenting network permissions.
upvoted 0 times
...
Laurel
2 years ago
I think disabling administrative accounts is also important to prevent unauthorized changes.
upvoted 0 times
...
Vincent
2 years ago
I agree, giving minimum permissions is crucial for security.
upvoted 0 times
...
Desmond
2 years ago
C and D both sound like good strategies to me.
upvoted 0 times
...
Dominque
2 years ago
I think D is also important, disabling admin accounts can prevent unauthorized changes.
upvoted 0 times
...
Haley
2 years ago
I agree, C is definitely a key defense-in-depth strategy principle.
upvoted 0 times
...
...
Eladia
2 years ago
I think the answer is C) Provide the minimum permissions needed to perform Job functions.
upvoted 0 times
...
Shaun
2 years ago
I think B is the right answer. Segmenting network permissions is a key part of defense-in-depth.
upvoted 0 times
Ira
2 years ago
It's important to consider all these principles for a strong defense-in-depth strategy.
upvoted 0 times
...
Beckie
2 years ago
D is also a good strategy, disabling administrative accounts can prevent unauthorized changes.
upvoted 0 times
...
Annice
2 years ago
I think C is also important, providing minimum permissions needed for job functions.
upvoted 0 times
...
Noel
2 years ago
I agree, segmenting network permissions is crucial for defense-in-depth.
upvoted 0 times
...
...

Save Cancel