Question

Ric is reviewing his organization's network design and is concerned that a known flaw in the border router could let an attacker disable their Internet connectivity. Which of the following is an appropriate compensatory control?

A. An identical second redundant router set up in an active/passive design
B. An alternate Internet connectivity method using a different router type
C. An identical second redundant router set up in an active/active design
D. Place a firewall in front of the router to stop any potential exploits that could cause a failure of connectivity

Answer 1

Ric should use an alternate Internet connectivity method using a different type of router as a compensatory control to mitigate the risk of a known flaw in the border router that can disable their Internet connectivity.

Step-by-step explanation:

Ric is concerned that a known flaw in the border router could let an attacker disable their Internet connectivity. To mitigate this risk, he should consider using an appropriate compensatory control. A good solution would be option B, An alternate Internet connectivity method using a different router type. This would not only provide redundancy but also mitigate the risk associated with the flaw in the current router's design. Although an identical redundant router in an active/passive or active/active design (options A and C) could provide some redundancy, they would still be subject to the same known flaw. Placing a firewall in front of the router (option D) could provide an additional layer of security but would not prevent the router itself from being attacked and disabled. Therefore, an alternate Internet connectivity method with a different router would be the most effective compensatory control in this scenario.