CISSP Practice Question – Security Architecture & Engineering
An enterprise recently experienced a targeted attack where an employee unknowingly installed malicious software via a phishing link. The malware bypassed endpoint antivirus and gained limited access to internal systems. The CISO wants to redesign controls to reduce the likelihood of this type of compromise in the future.
Which design principle BEST addresses this goal?
A. Security through obscurity
B. Defense in depth
C. Fail-safe defaults
D. Least common mechanism
3
19 comments
Vincent Primiani
7
CISSP Practice Question – Security Architecture & Engineering
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by