Examkin

Question

Difficulty: EasyKey Security Concepts, Threats, Vulnerabilities, and Mitigations

Match each network security threat on the left with its corresponding primary mitigation strategy on the right.

  • Ransomware infectionMaintaining immutable offsite backups and deploying endpoint protection software
  • IP address spoofingConfiguring anti-spoofing Access Control Lists and Unicast Reverse Path Forwarding
  • Password brute-force attackEnforcing multi-factor authentication and account lockout threshold policies
  • Unescorted server room accessInstalling biometric scanners, smart card locks, and physical security logs

Answer

Ransomware infection matches maintaining immutable offsite backups and deploying endpoint protection software. IP address spoofing matches configuring anti-spoofing Access Control Lists and Unicast Reverse Path Forwarding. Password brute-force attack matches enforcing multi-factor authentication and account lockout threshold policies. Unescorted server room access matches installing biometric scanners, smart card locks, and physical security logs.
Each threat item is correctly paired with the corresponding operational defense: Ransomware requires immutable backups and endpoint detection; IP spoofing requires packet header validation via anti-spoofing ACLs or uRPF; Brute-force attacks require authentication controls like lockout thresholds and multi-factor authentication; and unauthorized facility access requires physical security controls such as biometric devices and locks.

Step-by-Step Solution

1
Analyze each security threat to determine its attack vector.
Identified four distinct threat vectors: file encryption (Ransomware), packet header manipulation (IP spoofing), credential guessing (Brute-force), and physical intrusion (Server room access).
Selecting the correct mitigation requires identifying whether the threat is physical, network-layer, identity-based, or software-based.
2
Match each threat vector with the technical or physical security control engineered to mitigate it.
Ransomware maps to backups/endpoint defense; IP spoofing maps to ACLs/uRPF; Brute-force maps to MFA/Lockout policies; Physical intrusion maps to biometrics/badge controls.
Effective defense-in-depth requires applying targeted controls aligned with specific vulnerability types and threat vectors.

Key Concept

Security Threats and Mitigation Controls
Rate this question

Topics

Key Security Concepts, Threats, Vulnerabilities, and Mitigations

More questions from this topic