GSEC 401.2 Defense In Depth Questions
and Correct Answers the Latest Update
Inbound Network Traffic
✓ * Monitor Inbound network prevention
Outbound Network Traffic
✓ * Monitor Outbound network detection
✓ * Majority of problems are outbound
defense in depth
✓ * Diversify to keep the vulnerabilities at a minimum
Risk (Formula)
✓ Threat x Vulnerability (to that threat)
Three TOP 20 Lists (Outbound Traffic)
|
✓ Thank You for Choosing Us! ✓ Resources & Updates: [Testtrackers - Stuvia US]
✓ © 2024 TestTrackers ✓ Your Success is Our Mission!
✓ Customer Support: [+254707240657]
, TestTrackers: Unlock Your Exam Potential! | Quality Practice Materials | Boost Your Confidence Today!
✓ 1) Number Connections
✓ 2) Length of Connections
✓ 3) Amount of Data
✓ ------------------------
✓ (High false positives, but increase the accuracy of Vulnerabilities)
✓ 4a) Percent of Encrypted Traffic
✓ 4b) Destination IP Address
Risk Analysis Questions
✓ * Before a company spends a dollar of it's money or a minute of its time; answer the 3
questions
✓ -------------
✓ 1) What is the *Risk*
✓ 2) Is it the *Highest Priority* risk
✓ 3) *Cost Effective* way of reducing the risk
Top 5 List of Threats
✓ Critical Data and Process that support it
✓ Likely Threats
✓ Most likely Vulnerabilities
Questions for CEOs
|
✓ Thank You for Choosing Us! ✓ Resources & Updates: [Testtrackers - Stuvia US]
✓ © 2024 TestTrackers ✓ Your Success is Our Mission!
✓ Customer Support: [+254707240657]
, TestTrackers: Unlock Your Exam Potential! | Quality Practice Materials | Boost Your Confidence Today!
✓ What are the things that worry you most?
✓ What could cause you to be removed from the board?
✓ What keeps you up at night?
Reduce Risk
✓ To reduce risk lets reduce Vulnerabilities
3 Goals of Security (CIA Triad)
✓ 1) Confidentiality / Disclosure
✓ 2) Integrity / Alteration
✓ 3) Availability / Destruction
Confidentiality vs Disclosure
✓ Only shared among authorized persons or organisations
Integrity vs Alteration
✓ Authentic an complete.
✓ Sufficient and Accurate
✓ Trustworthy and reliable
Availability vs Destruction
✓ Accessible when needed by those who need it
|
✓ Thank You for Choosing Us! ✓ Resources & Updates: [Testtrackers - Stuvia US]
✓ © 2024 TestTrackers ✓ Your Success is Our Mission!
✓ Customer Support: [+254707240657]
, TestTrackers: Unlock Your Exam Potential! | Quality Practice Materials | Boost Your Confidence Today!
Network Visibility Tree
✓ * Breakdown by IP Address and Port
✓ ex 10.0.0.X
✓ /\
✓ 10.0.0.3 10.0.0.10
✓ /|\/|\
✓ 23 110 5150 43 210 443
✓
✓ * Identify unnecessary use of ports
4 approaches to Defense In Depth
✓ 1) Uniform Protection
✓ 2) Protected Enclaves
✓ 3) Information Centric
✓ 4) Threat Vector Analysis
Uniform Protection
✓ 1) Most common approach to DiD
✓ 2) Firewall, VPN, Intrusion, Detection, Antivirus, Patching
✓ 3) All parts of the organization receive equal protection
✓ 4) Treats all the systems the same
Protected Enclaves
|
✓ Thank You for Choosing Us! ✓ Resources & Updates: [Testtrackers - Stuvia US]
✓ © 2024 TestTrackers ✓ Your Success is Our Mission!
✓ Customer Support: [+254707240657]