Computer Security Applicationsadvanced
A malicious insider already has access to an organization's network. Describe how layered controls can reduce the potential harm.
Answer
The organization can limit the insider's permissions so they reach only necessary systems and information, monitor and log activity to detect suspicious behavior, and use additional technical, administrative, and physical safeguards. These layers reduce the damage a single compromised account or malicious person can cause.
Explanation
### What a good answer covers
- Uses restricted access to limit what the insider can reach.
- Uses monitoring to identify suspicious activity quickly.
- Uses logging to preserve evidence for review and investigation.
- Applies multiple relevant control types rather than relying on the network boundary alone.
- Explains that layered controls limit harm even when prevention fails.
### Terms
- **Insider threat**: Risk arising from someone who has access to an organization's systems or information.
- **Least privilege**: Limiting access to what is needed for assigned work.
- **Defense in depth**: Using several safeguards so one failure does not remove all protection.
### Remember
Access inside the network should still be limited and observed.
Related Questions
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database account should have only the permissions required for its task. This is the principle of _____.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free