nerdexam
GIAC

GSEC · Question #92

Which Defense-in-Depth principle starts with an awareness of the value of each section of information within an organization?

The correct answer is A. Information centric defense. Information-centric defense is the Defense-in-Depth principle that begins by identifying and classifying the value of each type of information within an organization to guide protection priorities.

Defense in Depth and Protocols

Question

Which Defense-in-Depth principle starts with an awareness of the value of each section of information within an organization?

Options

  • AInformation centric defense
  • BUniform information protection
  • CGeneral information protection
  • DPerimeter layering

How the community answered

(29 responses)
  • A
    79% (23)
  • B
    14% (4)
  • C
    3% (1)
  • D
    3% (1)

Why each option

Information-centric defense is the Defense-in-Depth principle that begins by identifying and classifying the value of each type of information within an organization to guide protection priorities.

AInformation centric defenseCorrect

Information-centric defense places the data itself at the center of the security model, starting with an assessment of what information exists and how valuable or sensitive it is to the organization. This value-driven classification then determines which controls, access policies, and layered defenses are applied to protect that specific information wherever it resides or travels.

BUniform information protection

Uniform information protection applies the same level of protection to all information regardless of value, which is the opposite of starting with an awareness of each section's individual value.

CGeneral information protection

General information protection is not a recognized Defense-in-Depth principle and does not describe a methodology anchored in per-asset value assessment.

DPerimeter layering

Perimeter layering focuses on placing successive defensive barriers around the network boundary, not on evaluating and prioritizing protection based on the value of specific information assets.

Concept tested: Defense-in-Depth information-centric security principle

Source: https://learn.microsoft.com/en-us/azure/well-architected/security/principles

Topics

#defense in depth#information-centric security#security strategy#data value

Community Discussion

No community discussion yet for this question.

Full GSEC Practice