Defense-in-Depth vs Adaptive Security for Unknown Vulnerabilities
Given the complexities of an organization’s network infrastructure, a threat actor has exploited an unidentified vulnerability, leading to a major data breach. As a Certified Ethical Hacker (CEH). you are tasked with enhancing the organization's security stance. To ensure a comprehensive security defense, you recommend a certain security strategy. Which of the following best represents the strategy you would likely suggest and why?
Community Votes
80% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The core concept tested is network security architecture, with the common trap being confusion between static layering (DiD) and dynamic adaptation (Adaptive Security).
This question addresses the strategic approach to securing complex networks against unidentified vulnerabilities. It establishes that Defense-in-Depth is the recommended strategy due to its layered protection model.
Candidates often choose Option D (Continual/Adaptive Security) because it sounds comprehensive, but it misses the specific emphasis on structural complexity reduction found in the correct answer.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Option B, Defense-in-Depth, is the correct strategy because it explicitly focuses on increasing attack complexity through multiple layers of controls. By deploying redundant security measures across network, host, and application layers, an organization reduces the likelihood of a single point of failure leading to a breach. This aligns perfectly with the scenario of protecting against unknown vulnerabilities where traditional signature-based detection might fail.Why the Other Options Are Wrong
Option A describes Risk Management, which is a governance process rather than a technical defense strategy for immediate security stance enhancement. Option C outlines Information Assurance goals (CIA triad) but does not specify the architectural method to achieve them. Option D, while valuable, focuses on the lifecycle of prediction and response; however, CEH curriculum traditionally prioritizes Defense-in-Depth as the foundational architectural principle for mitigating unknown threats via complexity.Community Comment Notes
Community consensus heavily favors Option B, with users noting that DiD provides necessary redundancy. As user Dogeo noted, "A Defense-in-Depth strategy is designed to provide multiple layers of protection." User NikoTomas argued for D, stating that risk assessment should come first, but this overlooks the question's focus on enhancing the active security stance against exploitation.Exam Strategy
When asked about 'enhancing security stance' against 'unidentified' or 'unknown' threats, look for answers involving 'layers', 'multiple controls', or 'redundancy'. Defense-in-Depth is the standard CEH answer for structural resilience.
Frequently Asked Questions
Why not Adaptive Security for unknown vulnerabilities?
While Adaptive Security is modern, CEH exams prioritize Defense-in-Depth as the fundamental architectural principle for reducing single points of failure against unknown threats.
Is Risk Management a valid security strategy here?
No, Risk Management is a governance framework for identifying and treating risks, not a technical defense strategy like Defense-in-Depth used to harden infrastructure.