nerdexam
GIAC

GSEC · Question #56

Which Defense-in-Depth model involves identifying various means by which threats can become manifest and providing security mechanisms to shut them down?

The correct answer is A. Vector-oriented. The vector-oriented Defense-in-Depth model enumerates specific attack vectors - the paths by which threats materialize - and deploys targeted security controls to neutralize each one.

Defense in Depth and Protocols

Question

Which Defense-in-Depth model involves identifying various means by which threats can become manifest and providing security mechanisms to shut them down?

Options

  • AVector-oriented
  • BUniform protection
  • CInformation centric defense
  • DProtected enclaves

How the community answered

(31 responses)
  • A
    77% (24)
  • B
    6% (2)
  • C
    3% (1)
  • D
    13% (4)

Why each option

The vector-oriented Defense-in-Depth model enumerates specific attack vectors - the paths by which threats materialize - and deploys targeted security controls to neutralize each one.

AVector-orientedCorrect

The vector-oriented model specifically identifies each distinct attack vector (such as network ingress, removable media, email, or web applications) through which a threat can manifest and then assigns dedicated security mechanisms to block or mitigate each vector. This direct mapping of threat pathways to countermeasures is precisely what the question describes - identifying the means by which threats become manifest and providing mechanisms to shut them down.

BUniform protection

Uniform protection applies the same level of security controls across all assets regardless of their value or criticality, without specifically enumerating or targeting individual threat vectors.

CInformation centric defense

Information-centric defense focuses on protecting data and information itself at all stages (creation, storage, transmission, destruction) rather than identifying and blocking the vectors through which threats arrive.

DProtected enclaves

Protected enclaves segments the network into isolated, defended zones with strong perimeter controls between them, rather than mapping security mechanisms to specific threat delivery pathways.

Concept tested: Defense-in-Depth vector-oriented threat mitigation model

Source: https://csrc.nist.gov/publications/detail/sp/800-27/rev-a/final

Topics

#defense in depth#threat vectors#vector-oriented defense#security models

Community Discussion

No community discussion yet for this question.

Full GSEC Practice