Question at position 4 Which of the following is an essential cybersecurity takeaway?Develop applications without testingIdentify key assets and protect them with layered defencesPrioritize speed over safetyGrant admin access to all staffClear my selection

Question

Question at position 4 Which of the following is an essential cybersecurity takeaway?Develop applications without testingIdentify key assets and protect them with layered defencesPrioritize speed over safetyGrant admin access to all staffClear my selection

BlackTom AI · Accepted Answer

Identifying key assets and protecting them with layered defences is the foundational cybersecurity principle because it ties asset inventory, risk assessment, and defense-in-depth into one actionable strategy.

1) Relevant knowledge points and concepts
- Asset identification: knowing what systems, data, and services are valuable and must be protected.
- Risk assessment: evaluating threats, vulnerabilities, and potential impact to prioritize protection.
- Defense-in-depth (layered defences): using multiple independent controls (network, host, application, encryption, access controls, monitoring) so that a single failure doesn’t expose the asset.
- Principle of least privilege and secure development practices: restrict privileges and test software to reduce attack surface.
- Trade-offs: speed vs. security must be balanced; security failures can be catastrophic.

2) Step-by-step reasoning
Step 1: Effective security starts with knowing what to protect—identify and classify assets (data, systems, services).
Step 2: Perform risk assessment to rank assets by criticality and exposure.
Step 3: Apply layered controls appropriate to each asset (e.g., firewalls, segmentation, endpoint protection, strong authentication, encryption, backups, monitoring).
Step 4: Continuously test and update controls; incident response and recovery planning complete the loop.

3) Intermediate steps / illustrative example
- Asset: customer payment data. Classify as high sensitivity.
- Controls: network segmentation (reduces exposure), encryption at rest and in transit (protects confidentiality), MFA for access (authentication), logging & monitoring (detection), regular patching and testing (resilience).
Each layer mitigates different failure modes; combined they reduce overall risk.

4) Why the correct answer is correct
Layered defence acknowledges that no single control is perfect; by identifying key assets first, you can allocate resources effectively and create redundant protections that reduce likelihood and impact of compromise.

5) Why other options are incorrect
- Develop applications without testing: increases vulnerabilities and is risky; testing is essential.
- Prioritize speed over safety: rushing sacrifices security, leading to breaches and higher long-term costs.
- Grant admin access to all staff: violates least privilege, increases attack surface and insider risk.

6) Conclusion
Therefore, the correct cybersecurity takeaway is: Identify key assets and protect them with layered defences. This matches the provided answer.

Question at position 4 Which of the following is an essential cybersecurity takeaway?Develop applications without testingIdentify key assets and protect them with layered defencesPrioritize speed over safetyGrant admin access to all staffClear my selection单项选择题

类似问题

A person who accesses a network by walking through an unlocked door is known as

What is the main purpose of digital security?

You own a bond that pays $64 in interest annually. The face value is $1,000 and the current market price is $1,021.61. The bond matures in 11 years. What is the yield to maturity?

Which of the following statements is CORRECT?

更多留学生实用工具

智能学习助手

风格化写作助手

论文查重助手

文献引用助手

课堂转译助手

课堂笔记助手

Quiz搜索助手

学校历年真题

智能刷题助手

智能匹配练习

希望你的学习变得更简单