Security countermeasures for mitigating identified risks include:

Question

Options

• ADisabling all firewall rules to prevent false positives
• BEncrypting sensitive data both at rest and in transit
• CReducing the complexity of network passwords
• DDecreasing the frequency of security audits

• A
  4% (1)
• B
  93% (26)
• C
  4% (1)

Explanation

Encrypting sensitive data both at rest and in transit (B) is a direct countermeasure that addresses the risk of unauthorized data exposure - it ensures that even if data is intercepted or storage is compromised, the information remains unreadable without the decryption key.

Why the distractors are wrong:

• A is the opposite of a countermeasure - disabling firewall rules removes a security control and dramatically increases attack surface.
• C reducing password complexity weakens authentication, making systems more vulnerable to brute-force and credential attacks.
• D decreasing audit frequency means threats go undetected longer, which amplifies risk rather than mitigating it.

Memory tip: Think of the word "countermeasure" as something that counters (fights against) a threat - so every wrong answer here actually helps attackers. Only encryption actively protects data regardless of whether a breach occurs, fitting the definition of a true security control.

No community discussion yet for this question.