Defense in Depth and Hardening
You will learn to pick the control class that removes what an attack depends on, and to tell removal from a setting. Interviewers ask 'how would you defend against that?' after every attack scenario.
on this pageshowhide
explore
- Matching Control to Technique11 questions
- The Substitution Test3 questions
- Layers That Fail Together4 questions
- Mitigation Without a Fix4 questions
- Taking the Option Away13 questions
- Standing Administrative Rights5 questions
- Execution Allowlisting Limits4 questions
- Disabled Versus Removed4 questions
- Removal on Paper8 questions
- Estate Patch Cadence4 questions
- Load-Bearing Benchmark Items4 questions
questions
page 2 of 2One scanner fleet keeps SMBv1 alive for 600 hosts - how do you actually retire the protocol?
level: principalimportance: nice to knowfreq 33%
basics
~20 sTreat it as a capital replacement, not a security change. Find the one remaining consumer, upgrade or replace it against the budget that owns the device, attach an owner and a date, and scope the exception to that device meanwhile.
A customer's contract cites your hardening benchmark percentage — should you re-rank the standard's items?
level: principalimportance: nice to knowfreq 30%
basics
~20 sKeep the published list untouched as the outward number and add an internal load-bearing subset that drives engineering priority. Re-ranking the standard itself destroys the only property the number had — that you did not choose the weights — and leaves nobody able to compare you with anyone.
showing 31–32 of 32