SSCP · Question #1111
Countermeasures have three main objectives, what are they? (Choose all that apply)
The correct answer is A. Prevent B. Recover C. Detect. The three main objectives of security countermeasures are to prevent attacks, detect when they occur, and enable recovery from successful incidents.
Question
Countermeasures have three main objectives, what are they? (Choose all that apply)
Options
- APrevent
- BRecover
- CDetect
- DTrace
- ERetaliate
How the community answered
(37 responses)- A86% (32)
- D11% (4)
- E3% (1)
Why each option
The three main objectives of security countermeasures are to prevent attacks, detect when they occur, and enable recovery from successful incidents.
Preventative countermeasures aim to stop an attack from happening, such as firewalls or strong access controls.
Recovery countermeasures focus on restoring systems and data to their normal state after an incident, often through backups and disaster recovery plans.
Detective countermeasures are designed to identify and alert administrators to ongoing or attempted intrusions, such as intrusion detection systems (IDS).
While tracing an attacker might be part of incident response, it is a secondary goal or a step within the broader detection/recovery process, not a primary objective of countermeasures themselves.
Retaliation is an aggressive action and is not considered a legitimate or ethical objective of defensive security countermeasures.
Concept tested: Objectives of security countermeasures
Source: https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.04162018.pdf
Topics
Community Discussion
No community discussion yet for this question.