Which of the Following Is NOT a Valid Rule of Thumb

question 43

Multiple Choice

Which of the following is NOT a valid rule of thumb on risk control strategy selection?

• A) When a vulnerability exists: Implement security controls to reduce the likelihood of a vulnerability being exploited.
• B) When a vulnerability can be exploited: Apply layered protections, architectural designs, and administrative controls to minimize the risk or prevent the occurrence of an attack.
• C) When the attacker's potential gain is less than the costs of attack: Apply protections to decrease the attacker's cost or reduce the attacker's gain, by using technical or operational controls.
• D) When the potential loss is substantial: Apply design principles, architectural designs, and technical and non-technical protections to limit the extent of the attack, thereby reducing the potential for loss.

---

Definitions:

Melted

Refers to a solid substance that has been turned into a liquid by heating.

Friction

The resistance that one surface or object encounters when moving over another, often generating heat.

Immobilize

To restrict the movement of a part of the body or an object, often to prevent further injury or to allow healing.

Action

The process of doing something, typically to achieve an aim or to deal with a problem.