Question

In a defense-in-depth approach, which three options must be identified to effectively defend a network against attacks? (Choose three.)

a. total number of devices that attach to the wired and wireless network
b. assets that need protection
c. vulnerabilities in the system
d. location of attacker or attackers
e. past security breaches
f. threats to assets

Answer 1

To effectively defend a network with a defense-in-depth approach, it is crucial to identify the assets requiring protection, the system's vulnerabilities, and the potential threats to these assets.

Step-by-step explanation:

In a defense-in-depth approach to effectively defend a network against attacks, three key options must be identified:

• Assets that need protection: These include not only physical devices but also data, intellectual property, and other intangibles that could be compromised in an attack.
• Vulnerabilities in the system: Identifying weaknesses within the network that could be exploited by attackers is crucial for reinforcing security measures and reducing risk.
• Threats to assets: Recognizing potential threats, from nation-states to cyber criminals and non-state actors, enables strategic planning and the implementation of appropriate security protocols.

While not directly mentioned in the question, it is important to understand that national security now broadens beyond military might to include economic, energy, and environmental security, shaped by diverse threats, including natural disasters and non-state organizations.