iSACA Cybersecurity Fundamentals Certification Practice Exam

What are "Concentric Rings" in relation to security layers?

1. A method for creating a single, robust defense

2. A series of nested layers that delay attackers

3. A strategy for eliminating redundancy in security

4. A technique for maximizing network speed

The correct answer is: A series of nested layers that delay attackers

"Concentric Rings" in relation to security layers refers to a model where multiple layers of defense are designed to protect an organization's assets. These layers are arranged in a nested fashion, much like rings surrounding a core. Each layer serves as a barrier and can delay attackers, providing additional time for detection and response to potential threats. This concept emphasizes the importance of having multiple safeguards in place, so if one layer is penetrated, the subsequent layers can still provide protection. This layered approach reduces the likelihood of a successful attack reaching sensitive data or critical systems because attackers must breach each internal layer to advance. In contrast to the concept of creating a single, robust defense, which suggests a more linear protective strategy, concentric rings acknowledge that security is best achieved through redundancy and multiple overlapping defenses. This model inherently assumes that no single defense will be perfect, which is why having a series of nested layers is vital for effective cybersecurity.