Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityHard
A security architect is designing a system for a critical infrastructure company. They need to ensure that the system can withstand significant cyberattacks and continue to operate, albeit potentially in a degraded state, without complete failure. Which security principle is being prioritized here?
- AIsolation
- BEfficiency
- CObscurity
- DResilience
Show answer & explanationAnswer & explanation
Correct answer: D. Resilience
Resilience in cybersecurity refers to the ability of a system to withstand and recover from disruptions, including cyberattacks, and continue to deliver its intended services, even if in a degraded capacity. The scenario explicitly mentions 'withstand significant cyberattacks' and 'continue to operate...without complete failure', which directly describes resilience.
Why the other options are wrong
- A. Isolation separates systems, which can contribute to resilience but isn't the overarching principle of continued operation during attack.
- B. Efficiency focuses on optimal resource usage, not directly on attack endurance.
- C. Obscurity relies on hiding system details, which is a weak security measure and not about sustained operation.
Cybersecurity Resilience
The ability of an organization to anticipate, withstand, recover from, and adapt to adverse conditions, stresses, attacks, or compromises on systems that use or are enabled by cyber resources.
- Focuses on maintaining critical functions during an attack.
- Includes prevention, detection, response, and recovery.
- Aims for continued operation, possibly in a degraded state.
Memory trick: Resilience is like a flexible tree, bending in the storm but not breaking.