CCSP Exam QuestionsBrowse all questions from this exam

CCSP Exam - Question 459


Countermeasures for protecting cloud operations against internal threats include all of the following except:

Show Answer
Correct Answer: C

Hardened perimeter devices are measures designed to protect against external threats by securing the boundaries of a network. Internal threats involve risks from within the organization, such as malicious insiders or unintentional internal errors. Hence, hardened perimeter devices would not be an effective countermeasure for internal threats, making it the correct answer.

Discussion

7 comments
Sign in to comment
gavbam
Aug 5, 2022

Answer C is correct try whittle the other ones away you will see defo not D so A, B or C B incorrect an attacker doenst care so left with A or C A is a distractor c is left

Alex_2169
Aug 13, 2024

C is the best answer

data304Option: B
Apr 8, 2024

I personally don't agree to C, because in large enterprises you may have several internal network zones which some of these may have a perimeter control. So from my perspective B makes no sense and is not a formal control.

lolanczos
Dec 19, 2024

C is objectively correct.

Sa007788
Jul 29, 2022

answer not true, most attck come from internal staff.When we use a lapotop we don't access with admin account.

Ahbey_911
Aug 3, 2022

Hardened perimeter defense mitigates against external threats, not internal threat actor that already have access to the internal network. The selected answer is correct.

lolanczos
Dec 19, 2024

It's C. The context is EXTERNAL attack. Hardened perimeter devices are primarily a countermeasure against external threats, not internal threats. Internal threats require measures that focus on personnel, access controls, and monitoring of insider activity. The others are all internal measures.

MaciekMTOption: C
Feb 25, 2025

Countermeasures for internal threats focus on personnel security, training, and monitoring to prevent malicious or accidental insider threats. While hardened perimeter devices (e.g., firewalls, intrusion prevention systems) are crucial for external security, they do not specifically address internal threats. šŸ”¹ Effective Internal Threat Countermeasures: A. Extensive and comprehensive training programs → Educates employees on security best practices and how to avoid insider threats. B. Skills and knowledge testing → Ensures employees understand security policies and can apply them correctly. D. Aggressive background checks → Helps identify potentially risky employees before hiring. šŸ”¹ Why Not "Hardened Perimeter Devices"? Perimeter security is designed to block external attackers, not to monitor or prevent insider threats. Insider threats often bypass perimeter security because they originate from within the organization.

bdfb8cfOption: C
Mar 10, 2025

An unskilled internal actor is a threat Perimeter security is defense vs external threat