D340 Cyber Defense and Countermeasures - Set 2 - Part 3

Correct Answer: A hardened, approved system template used for consistent deployment

A golden image is a pre-hardened, patched, approved template ensuring every deployed system starts from a known secure configuration.

Correct Answer: Known vulnerabilities remain permanently exploitable

Unpatchable systems retain known exploitable flaws indefinitely, requiring compensating controls such as isolation, strict access limits, and enhanced monitoring.

Correct Answer: Network isolation with tightly restricted access and enhanced monitoring

When patching is impossible, restricting reachability, limiting who can access it, and monitoring closely reduce the likelihood and detectability of exploitation.

Correct Answer: Reducing the success rate of attacks that depend on human action

Many attacks require a person to click, disclose, or approve something. Training reduces that success rate, complementing rather than substituting for technical controls.

Correct Answer: They provide realistic practice and measure genuine susceptibility

Simulations give experiential learning at the moment of the mistake and produce measurable data on susceptibility trends, guiding targeted training.

Correct Answer: As a training opportunity rather than a punitive event

Punitive responses discourage reporting of genuine incidents. Treating failures as learning opportunities sustains the reporting culture defenders depend on.

Correct Answer: User reports often provide the earliest warning of a targeted campaign

Users frequently detect targeted attacks that automated filtering misses, so a low-friction reporting process gives defenders valuable early warning.

Correct Answer: Fewer distinct platforms mean fewer configurations to secure and patch

Standardization reduces the variety of platforms requiring hardening, patching, and expertise, though it does concentrate risk if a shared platform is compromised.

Correct Answer: A single vulnerability can affect the entire environment simultaneously

When all systems share one platform, a single exploitable flaw affects everything at once, which is the trade-off against standardization's operational benefits.

Correct Answer: Consistently applying, verifying, and maintaining secure configuration over time

Hardening is continuous: configurations must be applied consistently, verified through auditing, and maintained as systems change and new guidance emerges.