200-201 Question 50
Select 3You are a cybersecurity analyst for a medium-sized company. The organization recently experienced a ransomware attack that exploited a vulnerable application. During the investigation, you discover that the attack succeeded because the company relied solely on endpoint antivirus protection. Which of the following actions align with the principles of a defense-in-depth strategy to better protect the organization in the future?
- A
Implementing network segmentation to isolate critical systems from less secure areas of the network.
- B
Deploying a single advanced firewall to protect the entire organization's perimeter.
- C
Enforcing multi-factor authentication (MFA) for all users accessing sensitive systems.
- D
Regularly conducting vulnerability assessments and applying patches to software and systems.
- E
Relying on encryption for all data stored on company networks without additional controls.
Show answer and explanation
Correct answers: A, C, D
Explanation
Defense-in-depth is a cybersecurity strategy that employs multiple layers of defensive measures to protect an organization's assets. By combining network segmentation, multi-factor authentication, and regular vulnerability management, organizations can create a more robust security posture and reduce the likelihood of a successful attack. Relying on a single control or device, such as a firewall or encryption, is contrary to this principle.
- A. Correct.
Network segmentation is a key aspect of defense-in-depth. It limits the spread of attacks by isolating critical systems and reducing the attack surface.
- B. Incorrect.
While firewalls are important, relying on a single device contradicts the layered approach of defense-in-depth. A single point of failure could be exploited by attackers.
- C. Correct.
Multi-factor authentication adds an additional layer of security, making it harder for attackers to gain unauthorized access to sensitive systems.
- D. Correct.
Vulnerability assessments and timely patching address known software and system weaknesses, reducing the chances of exploitation. This aligns with the proactive approach of defense-in-depth.
- E. Incorrect.
Encryption is important but insufficient on its own. Defense-in-depth emphasizes combining multiple layers of protection rather than relying solely on one control.