312-50V11 · Question #765
Which security strategy requires using several, varying methods to protect IT systems against attacks?
The correct answer is A. Defense in depth. Defense in depth is the security strategy that employs multiple, overlapping layers of controls so that the failure of one layer does not compromise the entire system.
Question
Which security strategy requires using several, varying methods to protect IT systems against attacks?
Options
- ADefense in depth
- BCovert channels
- CExponential backoff algorithm
- DThree-way handshake
How the community answered
(48 responses)- A92% (44)
- B4% (2)
- C2% (1)
- D2% (1)
Why each option
Defense in depth is the security strategy that employs multiple, overlapping layers of controls so that the failure of one layer does not compromise the entire system.
Defense in depth applies several varied security controls - such as firewalls, intrusion detection systems, encryption, and access controls - at different layers of an IT environment, ensuring no single point of failure can expose the whole system. This layered approach means an attacker who bypasses one control is still confronted by additional independent barriers.
Covert channels are hidden communication paths used to exfiltrate data outside of normal monitored channels, not a protective multi-layer security strategy.
Exponential backoff is a network retry algorithm that progressively increases wait time between retransmission attempts after collisions or failures, unrelated to security layering.
The three-way handshake is the TCP connection establishment mechanism (SYN, SYN-ACK, ACK) and is a transport-layer protocol process, not a security protection strategy.
Concept tested: Defense in depth layered security strategy
Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.