312-50V9 · Question #526
Bob is acknowledged as a hacker of repute and is popular among visitors of "underground" sites. Bob is willing to share his knowledge with those who are willing to learn, and many have expressed…
The correct answer is A. Educate everyone with books, articles and training on risk analysis, vulnerabilities and safeguards. Broad education on vulnerabilities and risk analysis is the most effective strategy for closing the knowledge gap between offensive and defensive security practitioners.
Question
Bob is acknowledged as a hacker of repute and is popular among visitors of "underground" sites. Bob is willing to share his knowledge with those who are willing to learn, and many have expressed their interest in learning from him. However, this knowledge has a risk associated with it, as it can be used for malevolent attacks as well. In this context, what would be the most affective method to bridge the knowledge gap between the "black" hats or crackers and the "white" hats or computer security professionals? (Choose the test answer)
Options
- AEducate everyone with books, articles and training on risk analysis, vulnerabilities and safeguards.
- BHire more computer security monitoring personnel to monitor computer systems and networks.
- CMake obtaining either a computer security certification or accreditation easier to achieve so more
- DTrain more National Guard and reservist in the art of computer security to help out in times of emergency
How the community answered
(26 responses)- A92% (24)
- C4% (1)
- D4% (1)
Why each option
Broad education on vulnerabilities and risk analysis is the most effective strategy for closing the knowledge gap between offensive and defensive security practitioners.
Publishing books, articles, and training programs on risk analysis, vulnerabilities, and safeguards distributes defensive security knowledge widely, empowering security professionals with the same understanding of attack techniques that malicious hackers possess - which is the foundation of effective defense and is the core philosophy behind ethical hacking education.
Hiring more monitoring personnel increases response capacity but does not transfer knowledge about attack techniques and vulnerabilities to defenders, leaving the fundamental knowledge gap intact.
Lowering the barrier to certification increases the number of credentialed individuals but does not improve the depth or quality of security knowledge needed to counter sophisticated attackers.
Training National Guard and reservists addresses emergency military response scenarios but does not systematically bridge the civilian cybersecurity knowledge gap between attackers and defenders.
Concept tested: Security education and knowledge gap mitigation strategy
Topics
Community Discussion
No community discussion yet for this question.