GSEC · Question #3
Your organization is developing a network protection plan. No single aspect of your network seems more important than any other. You decide to avoid separating your network into segments or categorizi
The correct answer is A. Uniform protection. Applying identical security controls to every device with no network segmentation or asset categorization is called uniform protection.
Question
Your organization is developing a network protection plan. No single aspect of your network seems more important than any other. You decide to avoid separating your network into segments or categorizing the systems on the network. Each device on the network is essentially protected in the same manner as all other devices. This style of defense-in-depth protection is best described as which of the following?
Options
- AUniform protection
- BThreat-oriented
- CInformation-centric
- DProtected enclaves
How the community answered
(36 responses)- A75% (27)
- B6% (2)
- C17% (6)
- D3% (1)
Why each option
Applying identical security controls to every device with no network segmentation or asset categorization is called uniform protection.
Uniform protection is a defense-in-depth strategy where every device and network zone receives the same type and level of security control, with no differentiation based on asset criticality or data sensitivity. This approach is appropriate when no single part of the network is considered more important than another, and it simplifies policy management by avoiding tiered or segmented security architectures.
Threat-oriented protection tailors security controls around specific known attack vectors or threat actor profiles rather than applying identical protection uniformly to all assets.
Information-centric protection directs the strongest controls toward specific high-value data rather than treating all devices and segments equally.
Protected enclaves involves dividing the network into separately secured and isolated segments, which directly contradicts the described approach of avoiding segmentation.
Concept tested: Defense-in-depth uniform protection strategy
Source: https://csrc.nist.gov/publications/detail/sp/800-27/rev-a/final
Topics
Community Discussion
No community discussion yet for this question.