Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Isaca CISM Exam - Topic 5 Question 86 Discussion

Posted by Lenny on Sep 19, 2024 at 06:10 AM

Which of the following is the BEST defense-in-depth implementation for protecting high value assets or for handling environments that have trust concerns?

Suggested Answer: A

Compartmentalization is the best defense-in-depth implementation for protecting high value assets or for handling environments that have trust concerns because it is a strategy that divides the network or system into smaller segments or compartments, each with its own security policies, controls, and access rules. Compartmentalization helps to isolate and protect the most sensitive or critical data and functions from unauthorized or malicious access, as well as to limit the damage or impact of a breach or compromise. Compartmentalization also helps to enforce the principle of least privilege, which grants users or processes only the minimum access rights they need to perform their tasks. Therefore, compartmentalization is the correct answer.


https://www.csoonline.com/article/3667476/defense-in-depth-explained-layering-tools-and-processes-for-better-security.html

https://www.fortinet.com/resources/cyberglossary/defense-in-depth

https://sciencepublishinggroup.com/journal/paperinfo?journalid=542&doi=10.11648/j.ajai.20190302.11

Get Premium CISM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
36 comments · newest first
CO
Cory 10 months ago
Continuous monitoring is essential, but not the best alone.
KA
Karan 11 months ago
Wait, is multi-factor really that effective?
CA
Cary 11 months ago
Overlapping redundancy seems like overkill to me.
PE
Peggie 11 months ago
Totally agree, it limits exposure!
JE
Jeannine 11 months ago
I think compartmentalization is key for high value assets.
NI
Nichelle 12 months ago
Multi-factor authentication is important, but I’m not convinced it’s the best overall defense-in-depth strategy for environments with trust issues.
CO
Corinne 12 months ago
Continuous monitoring seems crucial for high-value assets, but I wonder if it’s enough on its own without other layers of security.
ED
Eden 12 months ago
Overlapping redundancy sounds familiar from practice questions, but I feel like it might not directly address trust concerns as effectively as other options.
ID
Idella 1 year ago
I remember studying defense-in-depth strategies, and I think compartmentalization might be the best choice here, but I'm not entirely sure.
GE
Georgeanna 1 year ago
I've got this! Compartmentalization is the way to go. By separating and isolating critical systems, you can minimize the impact of a breach and contain the damage. That's the textbook defense-in-depth approach for high-value assets.
MA
Marvel 1 year ago
Okay, let's see. Compartmentalization seems like a good strategy for isolating high-value assets. Overlapping redundancy could also provide extra layers of protection. I'll have to weigh the pros and cons of each option.
JO
Jolanda 1 year ago
Hmm, I'm a bit unsure about this one. I know defense-in-depth is important, but I'm not sure which of these options is the best implementation. I'll need to think it through carefully.
GR
Gregg 1 year ago
This looks like a classic defense-in-depth question. I think the best approach is to consider the key principles of defense-in-depth and how they apply to the scenario.
MO
Monte 1 year ago
Okay, let's see. I think the key is understanding how the iris and depth of field work together.
VA
Valentine 2 years ago
Compartmentalization? I'd rather compartmentalize my snacks during my security breaks.
CU
Curt 2 years ago
↳ replying to Valentine
C) Continuous monitoring
BR
Britt 2 years ago
↳ replying to Valentine
D) Multi-factor authentication
EL
Elenora 2 years ago
↳ replying to Valentine
A) Compartmentalization
JU
Junita 2 years ago
Multi-factor authentication? More like multi-factor annoyance! But hey, it works, I guess.
MA
Margot 2 years ago
Continuous monitoring, it's the only way to stay one step ahead of those pesky hackers.
JA
Jaime 2 years ago
↳ replying to Margot
D) Multi-factor authentication
RO
Ronny 2 years ago
↳ replying to Margot
C) Continuous monitoring
SH
Shakira 2 years ago
↳ replying to Margot
B) Overlapping redundancy
TA
Tamekia 2 years ago
↳ replying to Margot
A) Compartmentalization
IS
Isaiah 2 years ago
Overlapping redundancy, baby! Can't have too many layers of security, am I right?
HY
Hyun 2 years ago
↳ replying to Isaiah
D) Multi-factor authentication
LY
Lyndia 2 years ago
↳ replying to Isaiah
C) Continuous monitoring
TI
Timothy 2 years ago
↳ replying to Isaiah
B) Overlapping redundancy
AR
Arthur 2 years ago
↳ replying to Isaiah
A) Compartmentalization
LO
Lou 2 years ago
I agree with Chandra, compartmentalization helps to limit the impact of a security breach.
DO
Dorthy 2 years ago
I personally believe that multi-factor authentication is the best option, as it adds an extra layer of security.
LE
Leoma 2 years ago
Compartmentalization all the way! Gotta keep those high-value assets locked down tight.
YA
Yasuko 2 years ago
↳ replying to Leoma
C) Continuous monitoring
CH
Chi 2 years ago
↳ replying to Leoma
D) Multi-factor authentication
AN
Antonio 2 years ago
↳ replying to Leoma
A) Compartmentalization
CH
Chandra 2 years ago
I think the best defense-in-depth implementation is compartmentalization.
0/2000 characters

Save Cancel