• Wrong document? Swap it for free
  • Written by students who passed
  • Immediately available after payment
  • Read online or as PDF
Sell
Where do you study
Your language
Document preview thumbnail
Preview 4 out of 31 pages
Exam (elaborations)

GSEC 401.2 Defense In Depth Questions and Correct Answers the Latest Update

Document preview thumbnail
Preview 4 out of 31 pages

Inbound Network Traffic * Monitor Inbound network prevention Outbound Network Traffic * Monitor Outbound network detection * Majority of problems are outbound defense in depth * Diversify to keep the vulnerabilities at a minimum Risk (Formula) Threat x Vulnerability (to that threat) Three TOP 20 Lists (Outbound Traffic) TestTrackers: Unlock Your Exam Potential! | Quality Practice Materials | Boost Your Confidence Today! | Thank You for Choosing Us! © 2024 TestTrackers Customer Support: [] Resources & Updates: [Testtrackers - Stuvia US] Your Success is Our Mission! 1) Number Connections 2) Length of Connections 3) Amount of Data ------------------------ (High false positives, but increase the accuracy of Vulnerabilities) 4a) Percent of Encrypted Traffic 4b) Destination IP Address Risk Analysis Questions * Before a company spends a dollar of it's money or a minute of its time; answer the 3 questions ------------- 1) What is the *Risk* 2) Is it the *Highest Priority* risk 3) *Cost Effective* way of reducing the risk Top 5 List of Threats Critical Data and Process that support it Likely Threats Most likely Vulnerabilities Questions for CEOs TestTrackers: Unlock Your Exam Potential! | Quality Practice Materials | Boost Your Confidence Today! | Thank You for Choosing Us! © 2024 TestTrackers Customer Support: [] Resources & Updates: [Testtrackers - Stuvia US] Your Success is Our Mission! What are the things that worry you most? What could cause you to be removed from the board? What keeps you up at night? Reduce Risk To reduce risk lets reduce Vulnerabilities 3 Goals of Security (CIA Triad) 1) Confidentiality / Disclosure 2) Integrity / Alteration 3) Availability / Destruction Confidentiality vs Disclosure Only shared among authorized persons or organisations Integrity vs Alteration Authentic an complete. Sufficient and Accurate Trustworthy and reliable Availability vs Destruction Accessible when needed by those who need it TestTrackers: Unlock Your Exam Potential! | Quality Practice Materials | Boost Your Confidence Today! | Thank You for Choosing Us! © 2024 TestTrackers Customer Support: [] Resources & Updates: [Testtrackers - Stuvia US] Your Success is Our Mission! Network Visibility Tree * Breakdown by IP Address and Port ex 10.0.0.X / 10.0.0.3 10.0.0.10 / | / | 443 * Identify unnecessary use of ports 4 approaches to Defense In Depth 1) Uniform Protection 2) Protected Enclaves 3) Information Centric 4) Threat Vector Analysis Uniform Protection 1) Most common approach to DiD 2) Firewall, VPN, Intrusion, Detection, Antivirus, Patching 3) All parts of the organization receive equal protection 4) Treats all the systems the same Protected Enclaves TestTrackers: Unlock Your Exam Potential! | Quality Practice Materials | Boost Your Confidence Today! | Thank You for Choosing Us! © 2024 TestTrackers Customer Support: [] Resources & Updates: [Testtrackers - Stuvia US] Your Success is Our Mission! 1) Work groups that require additional protection are segmented from the rest of the internal organization 2) Restricting access to critical segments 3) Internal Firewalls 4) VLANs a

Content preview

TestTrackers: Unlock Your Exam Potential! | Quality Practice Materials | Boost Your Confidence Today!



GSEC 401.2 Defense In Depth Questions
and Correct Answers the Latest Update
Inbound Network Traffic

✓ * Monitor Inbound network prevention



Outbound Network Traffic

✓ * Monitor Outbound network detection

✓ * Majority of problems are outbound



defense in depth

✓ * Diversify to keep the vulnerabilities at a minimum



Risk (Formula)

✓ Threat x Vulnerability (to that threat)



Three TOP 20 Lists (Outbound Traffic)




|
✓ Thank You for Choosing Us! ✓ Resources & Updates: [Testtrackers - Stuvia US]
✓ © 2024 TestTrackers ✓ Your Success is Our Mission!
✓ Customer Support: [+254707240657]

, TestTrackers: Unlock Your Exam Potential! | Quality Practice Materials | Boost Your Confidence Today!


✓ 1) Number Connections

✓ 2) Length of Connections

✓ 3) Amount of Data

✓ ------------------------

✓ (High false positives, but increase the accuracy of Vulnerabilities)

✓ 4a) Percent of Encrypted Traffic

✓ 4b) Destination IP Address



Risk Analysis Questions

✓ * Before a company spends a dollar of it's money or a minute of its time; answer the 3
questions

✓ -------------

✓ 1) What is the *Risk*

✓ 2) Is it the *Highest Priority* risk

✓ 3) *Cost Effective* way of reducing the risk



Top 5 List of Threats

✓ Critical Data and Process that support it

✓ Likely Threats

✓ Most likely Vulnerabilities



Questions for CEOs




|
✓ Thank You for Choosing Us! ✓ Resources & Updates: [Testtrackers - Stuvia US]
✓ © 2024 TestTrackers ✓ Your Success is Our Mission!
✓ Customer Support: [+254707240657]

, TestTrackers: Unlock Your Exam Potential! | Quality Practice Materials | Boost Your Confidence Today!


✓ What are the things that worry you most?

✓ What could cause you to be removed from the board?

✓ What keeps you up at night?



Reduce Risk

✓ To reduce risk lets reduce Vulnerabilities



3 Goals of Security (CIA Triad)

✓ 1) Confidentiality / Disclosure

✓ 2) Integrity / Alteration

✓ 3) Availability / Destruction



Confidentiality vs Disclosure

✓ Only shared among authorized persons or organisations



Integrity vs Alteration

✓ Authentic an complete.

✓ Sufficient and Accurate

✓ Trustworthy and reliable



Availability vs Destruction

✓ Accessible when needed by those who need it




|
✓ Thank You for Choosing Us! ✓ Resources & Updates: [Testtrackers - Stuvia US]
✓ © 2024 TestTrackers ✓ Your Success is Our Mission!
✓ Customer Support: [+254707240657]

, TestTrackers: Unlock Your Exam Potential! | Quality Practice Materials | Boost Your Confidence Today!


Network Visibility Tree

✓ * Breakdown by IP Address and Port

✓ ex 10.0.0.X

✓ /\

✓ 10.0.0.3 10.0.0.10

✓ /|\/|\

✓ 23 110 5150 43 210 443

✓

✓ * Identify unnecessary use of ports



4 approaches to Defense In Depth

✓ 1) Uniform Protection

✓ 2) Protected Enclaves

✓ 3) Information Centric

✓ 4) Threat Vector Analysis



Uniform Protection

✓ 1) Most common approach to DiD

✓ 2) Firewall, VPN, Intrusion, Detection, Antivirus, Patching

✓ 3) All parts of the organization receive equal protection

✓ 4) Treats all the systems the same



Protected Enclaves




|
✓ Thank You for Choosing Us! ✓ Resources & Updates: [Testtrackers - Stuvia US]
✓ © 2024 TestTrackers ✓ Your Success is Our Mission!
✓ Customer Support: [+254707240657]

Document information

Uploaded on
November 12, 2024
Number of pages
31
Written in
2024/2025
Type
Exam (elaborations)
Contains
Questions & answers
$13.99

Wrong document? Swap it for free Within 14 days of purchase and before downloading, you can choose a different document. You can simply spend the amount again.
Written by students who passed
Immediately available after payment
Read online or as PDF

Seller avatar
Reputation scores are based on the amount of documents a seller has sold for a fee and the reviews they have received for those documents. There are three levels: Bronze, Silver and Gold. The better the reputation, the more your can rely on the quality of the sellers work.
ScholarsAscend
3.7
(82)
Sold
505
Followers
40
Items
30364
Last sold
1 day ago




Why students choose Stuvia

Created by fellow students, verified by reviews

Quality you can trust: written by students who passed their tests and reviewed by others who've used these notes.

Didn't get what you expected? Choose another document

No worries! You can instantly pick a different document that better fits what you're looking for.

Pay as you like, start learning right away

No subscription, no commitments. Pay the way you're used to via credit card and download your PDF document instantly.

Student with book image

“Bought, downloaded, and aced it. It really can be that simple.”

Alisha Student

Working on your references?

Create accurate citations in APA, MLA and Harvard with our free citation generator.

Working on your references?

Frequently asked questions