What technique of layered security design will allow for both investigation and recovery after an incident?

Question

Options

• ARI Technology
• BHighly available systems
• COverlap design approach
• DHoneypot placement

• A
  8% (4)
• B
  73% (38)
• C
  4% (2)
• D
  15% (8)

Explanation

Highly available systems enable layered security to serve dual purposes after an incident: the redundancy built into HA architectures lets teams isolate compromised components for forensic investigation while failover mechanisms keep operations running, supporting recovery simultaneously. This is the core value - you don't have to choose between preserving evidence and restoring service.

Why the distractors fail:

• A (RI Technology) is not a recognized standard security design term; it's likely a fabricated distractor.
• C (Overlap design approach) describes redundant or overlapping security controls (related to defense-in-depth), but it doesn't specifically address post-incident investigation and recovery as a primary function.
• D (Honeypot placement) aids in detecting and studying attackers, but honeypots are a deception/detection tool - not a recovery mechanism.

Memory tip: Think HA = Help After - Highly Available systems Help After incidents by letting you pull one node offline for investigation while the redundant node handles recovery. The redundancy is what makes both goals possible at once.

No community discussion yet for this question.