In which two ways should companies modernize their security philosophies? (Choose two.)

Question

Options

• AReinforce their threat-centric security tactics.
• BDecrease internal access and reporting
• CExpand their IT departments.
• DRebuild their security portfolios with new solutions
• EComplement threat-centric tactics with trust-centric methods.

• A
  79% (23)
• B
  10% (3)
• C
  3% (1)
• D
  7% (2)

Explanation

Modern security philosophies require a dual approach: reinforcing threat-centric tactics (A) ensures companies maintain strong defenses against known and emerging attacks, while complementing them with trust-centric methods (E) - such as Zero Trust architecture - addresses the reality that threats can come from inside the perimeter, not just outside.

Why the distractors are wrong:

• B is counterproductive - decreasing internal reporting weakens security visibility and incident response.
• C is impractical and misses the point; modernization is about strategy and tools, not simply hiring more people.
• D is a trap - "rebuilding with new solutions" implies replacing everything, whereas the correct approach is complementing existing tactics, not discarding them wholesale.

Memory tip: Think "Reinforce + Complement" - you don't abandon what works (threat-centric), you add to it (trust-centric). The word "complement" in option E is your biggest clue; it signals evolution, not replacement, which aligns perfectly with how real security modernization works.

No community discussion yet for this question.