Exam 312-50v12 topic 1 question 134 discussion

Actual exam question from ECCouncil's 312-50v12

Question #: 134
Topic #: 1

Given the complexities of an organization’s network infrastructure, a threat actor has exploited an unidentified vulnerability, leading to a major data breach. As a Certified Ethical Hacker (CEH). you are tasked with enhancing the organization's security stance. To ensure a comprehensive security defense, you recommend a certain security strategy. Which of the following best represents the strategy you would likely suggest and why?

A. Develop an in-depth Risk Management process, involving identification, assessment, treatment, tracking, and review of risks to control the potential effects on the organization.
B. Establish a Defense-in-Depth strategy, incorporating multiple layers of security measures to increase the complexity and decrease the likelihood of a successful attack.
C. Implement an Information Assurance (IA) policy focusing on ensuring the integrity, availability, confidentiality, and authenticity of information systems.
D. Adopt a Continual/Adaptive Security Strategy involving ongoing prediction, prevention, detection, and response actions to ensure comprehensive computer network defense.

Show Suggested Answer

Suggested Answer: D 🗳️

by DarioReymag at Feb. 6, 2024, 10:38 p.m.

Comments

Submit Cancel

insaniunt

Highly Voted 1 year ago

Selected Answer: D

D. Organizations should adopt adaptive security strategy, which involves implementing all the four network security approaches: Protection, Detection, Responding and Prediction The adaptive security strategy consists of four security activities corresponding to each security approach - page 53 from ceh v12 book

upvoted 7 times

...

e020fdc

Most Recent 3 months ago

Selected Answer: B

I thought D, but ChatGPT says B. Idk what EC Councils wants. "In the scenario, a threat actor exploited an unknown vulnerability (i.e., a zero-day or unidentified weakness), which led to a major data breach. This indicates that a single point of failure was likely exploited. The most effective countermeasure against such scenarios is to layer security controls, so that if one control fails, others are still in place to prevent or mitigate the attack. This is exactly what Defense-in-Depth provides."

upvoted 1 times

...

qtygbapjpesdayazko

11 months, 1 week ago

Selected Answer: D

D. Adopt a Continual/Adaptive Security Strategy involving ongoing prediction, prevention, detection, and response actions to ensure comprehensive computer network defense

upvoted 1 times

...