nerdexam
CompTIA

CAS-003 · Question #285

A large organization that builds and configures every data center against distinct requirements loses efficiency, which results in slow response time to resolve issues. However, total uniformity…

The correct answer is D. Lack of diversity increases the impact of specific events or attacks. D (Lack of diversity increases the impact of specific events or attacks) is the greatest risk. This is the monoculture or single point of failure problem at an architectural level. If every data center runs identical hardware, firmware, and software, a single discovered…

Risk Management

Question

A large organization that builds and configures every data center against distinct requirements loses efficiency, which results in slow response time to resolve issues. However, total uniformity presents other problems. Which of the following presents the GREATEST risk when consolidating to a single vendor or design solution?

Options

  • ACompetitors gain an advantage by increasing their service offerings.
  • BVendor lock in may prevent negotiation of lower rates or prices.
  • CDesign constraints violate the principle of open design.
  • DLack of diversity increases the impact of specific events or attacks.

How the community answered

(27 responses)
  • A
    11% (3)
  • B
    4% (1)
  • C
    7% (2)
  • D
    78% (21)

Explanation

D (Lack of diversity increases the impact of specific events or attacks) is the greatest risk. This is the monoculture or single point of failure problem at an architectural level. If every data center runs identical hardware, firmware, and software, a single discovered vulnerability, a targeted exploit, or even a vendor-specific hardware defect can simultaneously affect the entire infrastructure. This is analogous to agricultural monocultures - one pest or disease can wipe out the whole crop. Option B (vendor lock-in and pricing) is a real business risk but is a financial concern, not a security threat. Option C (open design) is a design principle, not a risk from consolidation. Option A (competitive disadvantage) is a business strategy concern unrelated to IT security risk.

Topics

#vendor diversity#single point of failure#vendor lock-in#risk management

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice