Cisco CCNP Security Core (SCOR) 350-701Security ConceptsMedium
A security team is implementing a new endpoint detection and response (EDR) solution. Before full deployment, they conduct a pilot program with a small group of users to identify potential issues and gather feedback. This approach is an example of which security best practice?
- AContinuous Improvement
- BDefense in Depth
- CChange Management
- DLeast Privilege
Show answer & explanationAnswer & explanation
Correct answer: A. Continuous Improvement
Conducting a pilot program to identify issues and gather feedback before full deployment is a clear example of continuous improvement. This practice involves iteratively refining processes and systems based on evaluation and learning.
Why the other options are wrong
- B. Defense in depth involves multiple layers of security controls, not the deployment strategy for a single solution.
- C. While change management is involved in deploying new solutions, the pilot program specifically highlights the 'improvement' aspect of testing and feedback.
- D. Least privilege refers to giving users the minimum necessary access rights, which is not directly illustrated by the pilot program.
Continuous Improvement
An ongoing effort to enhance products, services, or processes through iterative evaluation and refinement.
- Involves regular review and adaptation.
- Aims to increase effectiveness and efficiency.
- Often uses feedback loops and pilot programs.
Memory trick: Best practices are 'BEST' because they 'Bring' 'Effective' 'Security' 'Techniques'.