GSEC · Question #56
Which Defense-in-Depth model involves identifying various means by which threats can become manifest and providing security mechanisms to shut them down?
The correct answer is A. Vector-oriented. The vector-oriented Defense-in-Depth model enumerates specific attack vectors - the paths by which threats materialize - and deploys targeted security controls to neutralize each one.
Question
Which Defense-in-Depth model involves identifying various means by which threats can become manifest and providing security mechanisms to shut them down?
Options
- AVector-oriented
- BUniform protection
- CInformation centric defense
- DProtected enclaves
How the community answered
(31 responses)- A77% (24)
- B6% (2)
- C3% (1)
- D13% (4)
Why each option
The vector-oriented Defense-in-Depth model enumerates specific attack vectors - the paths by which threats materialize - and deploys targeted security controls to neutralize each one.
The vector-oriented model specifically identifies each distinct attack vector (such as network ingress, removable media, email, or web applications) through which a threat can manifest and then assigns dedicated security mechanisms to block or mitigate each vector. This direct mapping of threat pathways to countermeasures is precisely what the question describes - identifying the means by which threats become manifest and providing mechanisms to shut them down.
Uniform protection applies the same level of security controls across all assets regardless of their value or criticality, without specifically enumerating or targeting individual threat vectors.
Information-centric defense focuses on protecting data and information itself at all stages (creation, storage, transmission, destruction) rather than identifying and blocking the vectors through which threats arrive.
Protected enclaves segments the network into isolated, defended zones with strong perimeter controls between them, rather than mapping security mechanisms to specific threat delivery pathways.
Concept tested: Defense-in-Depth vector-oriented threat mitigation model
Source: https://csrc.nist.gov/publications/detail/sp/800-27/rev-a/final
Topics
Community Discussion
No community discussion yet for this question.