Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Defense in depth → Overall security strategy Security awareness → Human control layer Threat management → Threat-focused function Vulnerability management → Weakness-focused function
B. Defense in depth Defense in depth is considered the best strategy to implement an effective operational security posture. This approach involves layering multiple security measures and controls throughout an organization's infrastructure to provide multiple layers of protection. It goes beyond any single point of failure and helps mitigate various types of threats and vulnerabilities.
The answer is B. Defense in depth. Defense in depth is a security strategy that involves layering multiple security controls at different stages of an attack to provide redundancy and make it more difficult for attackers to succeed. This strategy is often compared to peeling an onion, as each layer of defense must be breached before the attacker can reach the core asset. Here's why the other options are not as effective: A. Increased security awareness: While security awareness is important, it is not a standalone strategy for implementing an effective operational security posture. It needs to be combined with other security controls to provide a comprehensive defense.