Which statement best distinguishes proactive from reactive cybersecurity?
Answer
Proactive work seeks to reduce risk before an attack, while reactive work responds after an incident
Explanation
### Why this is right
Proactive cybersecurity aims to identify and reduce weaknesses before they are exploited. Reactive cybersecurity focuses on responding to incidents after they happen.
### The concept
Proactive measures include security policies, authentication requirements, and monitoring for potential issues. Reactive measures include response plans, log review, and patching vulnerabilities after they are identified. A complete approach uses both because prevention cannot guarantee that an incident will never occur.
### The other options
- **Proactive work applies only after an incident, while reactive work prevents all attacks**: this reverses the meanings and makes an unsupported guarantee.
- **Both terms mean that an organization ignores risk until damage occurs**: proactive work is intended to address risk before an incident.
- **Reactive work replaces the need for prevention**: response is necessary but does not make preventive safeguards unnecessary.
### Terms
- **Proactive cybersecurity**: Efforts to prevent attacks by identifying and reducing weaknesses beforehand.
- **Reactive cybersecurity**: Efforts to respond to incidents after they occur.
### Remember
Proactive means before the incident; reactive means after it.
Related Questions
- A database-backed application needs to stop showing detailed database errors to ordinary users while retaining information for investigation. Which approach best matches the lesson?(intermediate)
- Regular security audits and penetration tests can help identify and fix application weaknesses before attackers exploit them.(basic)
- A Web Application Firewall (WAF) should be treated as a replacement for secure query construction.(basic)
- A database account should have only the permissions required for its task. This is the principle of _____.(basic)
- In blind Structured Query Language (SQL) injection, the attacker cannot directly see the result and instead infers information from application behavior.(basic)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free