CAS-005 · Question #144
During a recent assessment, a security analyst observed the following: Which of the following should the analyst use to address the vulnerabilities in the future?
The correct answer is C. Defense in depth. The question implies observing multiple vulnerabilities and asks for a comprehensive, proactive strategy to address them in the future.
Question
During a recent assessment, a security analyst observed the following:
Which of the following should the analyst use to address the vulnerabilities in the future?
Exhibits
Options
- ASystem image hardening
- BLeast privilege
- CDefense in depth
- DOS update
How the community answered
(51 responses)- A2% (1)
- B8% (4)
- C86% (44)
- D4% (2)
Why each option
The question implies observing multiple vulnerabilities and asks for a comprehensive, proactive strategy to address them in the future.
System image hardening focuses on securing the base configuration of systems, which is one component of overall security, but not a comprehensive strategy for addressing various vulnerabilities in the future.
Least privilege is a security principle for assigning minimum necessary access rights, which helps mitigate risk from compromised accounts but isn't a broad strategy for addressing all types of vulnerabilities.
Defense in depth is a security strategy that involves layering multiple security controls across different protection surfaces, ensuring that if one control fails, another will still provide protection. This holistic approach is designed to address a wide range of potential vulnerabilities across various attack vectors, providing comprehensive future mitigation.
OS update addresses specific known vulnerabilities in operating systems through patching, but it is a reactive measure and only one part of a comprehensive vulnerability management strategy.
Concept tested: Security strategy principles
Source: https://learn.microsoft.com/en-us/security/benchmark/azure/security-controls-v2-defense-in-depth
Community Discussion
No community discussion yet for this question.

