100-160 Question 11
Select 4A financial services company has recently experienced a data breach where attackers exploited a vulnerability in their outdated software to gain access to sensitive customer information. As part of the response plan, the cybersecurity team is reviewing their defense strategy. Which of the following measures would best align with the principles of defense-in-depth and the CIA triad to mitigate future risks?
- A
Implementing regular software updates and patch management processes
- B
Restricting access to sensitive data through role-based access controls
- C
Focusing solely on perimeter firewalls to block external attackers
- D
Conducting regular employee training on phishing and social engineering threats
- E
Encrypting sensitive customer data at rest and in transit
Show answer and explanation
Correct answers: A, B, D, E
Explanation
Defense-in-depth is a layered security approach that combines multiple measures to protect systems and data. By regularly updating software, restricting access, training employees, and encrypting data, organizations can address vulnerabilities, threats, and risks while upholding confidentiality, integrity, and availability (CIA). Focusing solely on perimeter firewalls is insufficient as it neglects other critical areas of cybersecurity.
- A. Correct.
Implementing regular software updates and patch management ensures that known vulnerabilities are addressed, reducing the risk of exploitation. This aligns with the principles of hardening systems within a defense-in-depth strategy.
- B. Correct.
Restricting access to sensitive data using role-based access controls reduces the risk of insider threats and unauthorized access, which supports the confidentiality aspect of the CIA triad.
- C. Incorrect.
Focusing solely on perimeter firewalls does not provide a comprehensive approach to cybersecurity. While firewalls are important, relying only on them neglects internal threats and other attack vectors.
- D. Correct.
Regular employee training on phishing and social engineering helps reduce the human element of risk, which is a critical layer of defense in a defense-in-depth strategy.
- E. Correct.
Encrypting sensitive data at rest and in transit ensures its confidentiality and integrity, even if attackers gain access to the system.