Infrastructure and Operations Security Basics - Defense in depth

Career Paths
1

Hi Admins,
I have been doing the Infrastructure and Operations Security Basics - 1.3 Defense in depth. it got 2 simple questions, but seven options for each question(select all that apply). i have read the right side theory portion multiple times and selected the so many choices (the permutations and combinations of 7 numbers), but no luck.

Spent around 3 hrs on these 2 quesitons, but still no luck.
pls give me some tips / ideas/ suggesitons, thanks.

2

Hey there - what do you think are the correct answers to each question?

3
  1. Configuring automated alerts for suspicious traffic addresses which of the following layers of defense in depth?

looks like Security Monitoring and Incident Response and Policies and Procedures

  1. Installing biometric authentication to enter a server room addresses which of the following layers of defense in depth?

looks like Physical Security (and also - Security Monitoring and Incident Response and Policies and Procedures as well)

4

For the first one, you have one of the two correct answers. While I could see the case for Policies and Procedures, it’s not the correct answer here. The term “traffic” is key here.

For the second one, Physical Security is one of the two answers. Security Monitoring / Incident Response is not correct, as the mere fact of installing biometric authentication does not directly relate to Security Monitoring. Same idea with Policies and Procedures - we’re installing biometric authentication, but the question does not contemplate security alerts or setting rules around who can and cannot enter the room. The key word for the second correct answer is “authentication”.

1 Like