nerdexam
EC-Council

212-89 · Question #127

Shally, an incident handler, is working for a company named Texas Pvt. Ltd. based in Florida. She was asked to work on an incident response plan. As part of the plan, she decided to enhance and…

The correct answer is A. Defense-in-depth. Shally has incorporated the Defense-in-depth strategy into the incident response plan for Texas Pvt. Ltd. Defense-in-depth is a layered security approach that involves implementing multiple security measures and controls throughout an information system. This strategy is…

Incident Handling and Response Planning

Question

Shally, an incident handler, is working for a company named Texas Pvt. Ltd. based in Florida. She was asked to work on an incident response plan. As part of the plan, she decided to enhance and improve the security infrastructure of the enterprise. She has incorporated a security strategy that allows security professionals to use several protection layers throughout their information system. Due to multiple layer protection, this security strategy assists in preventing direct attacks against the organization's information system as a break in one layer only leads the attacker to the next layer. Identify the security strategy Shally has incorporated in the incident response plan.

Options

  • ADefense-in-depth
  • BThree-way handshake
  • CCovert channels
  • DExponential backoff algorithm

How the community answered

(65 responses)
  • A
    91% (59)
  • B
    5% (3)
  • C
    2% (1)
  • D
    3% (2)

Explanation

Shally has incorporated the Defense-in-depth strategy into the incident response plan for Texas Pvt. Ltd. Defense-in-depth is a layered security approach that involves implementing multiple security measures and controls throughout an information system. This strategy is designed to provide several defensive barriers to protect against threats and attacks, ensuring that if one layer is compromised, others still provide protection. The goal is to create a multi-faceted defense that addresses potential vulnerabilities in various areas, including physical security, network security, application security, and user education.

Topics

#defense-in-depth#layered security#security strategy#incident response planning

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice