nerdexam
Isaca

CISM · Question #404

Which of the following BEST reduces the risk to an organization from advanced persistent threats (APTs)?

The correct answer is A. Adopting a defense in depth strategy. A defense in depth strategy involves implementing multiple layers of security controls across the organization, making it more difficult for advanced persistent threats (APTs) to succeed. This approach includes network segmentation, intrusion detection, endpoint protection…

Submitted by haru.x· Apr 18, 2026Information Security Risk Management

Question

Which of the following BEST reduces the risk to an organization from advanced persistent threats (APTs)?

Options

  • AAdopting a defense in depth strategy
  • BImplementing asset and vulnerability management
  • CPurchasing cybersecurity insurance
  • DApplying the principle of least privilege

How the community answered

(19 responses)
  • A
    63% (12)
  • B
    5% (1)
  • C
    16% (3)
  • D
    16% (3)

Explanation

A defense in depth strategy involves implementing multiple layers of security controls across the organization, making it more difficult for advanced persistent threats (APTs) to succeed. This approach includes network segmentation, intrusion detection, endpoint protection, access controls, and continuous monitoring. APTs use sophisticated, long-term attack techniques, and a layered defense strategy is the most effective way to detect, prevent, and respond to such

Topics

#Advanced Persistent Threats (APTs)#Defense in Depth#Risk Mitigation#Security Strategy

Community Discussion

No community discussion yet for this question.

Full CISM Practice