Enterprise Mitigation Techniques for Security+

This Security+ topic covers why enterprise mitigation techniques are used and which broad risk-reduction purpose each technique serves. It teaches segmentation, access control, ACLs, permissions, application allow lists, isolation, patching, encryption, monitoring, least privilege, configuration enforcement, decommissioning, and hardening techniques.

Start first lesson

4 lessons in this topic

Segmentation And Access Restrictions

Explain how segmentation, access controls, ACLs, permissions, least privilege, and restricted activities reduce blast radius.

Exposure Reduction Techniques

Match allow lists, isolation, patching, configuration enforcement, decommissioning, and removal of unnecessary software to exposure-reduction goals.

Protective Hardening Techniques

Explain the purpose of encryption, monitoring, endpoint protection, host firewalls, host intrusion prevention, disabled ports/protocols, and default password changes.

Mitigation Lifecycle Signals

Recognize mitigation-related lifecycle signals such as documented changes, out-of-cycle logging, missing logs, resource inaccessibility, and decommissioning.

Common mistakes to avoid

Learners often answer with the technology used to implement the restriction instead of the purpose. A firewall, IAM tool, file system, or router may implement the control, but the mitigation concept is segmentation, access control, ACLs, permissions, or least...

Learners often treat patching and configuration enforcement as the same. Patching changes software to fix known defects. Configuration enforcement maintains approved settings.

Learners often confuse monitoring with an indicator. Monitoring is the control that observes. An indicator is the suspicious event observed.

Learners often confuse lifecycle monitoring with attack indicators. Monitoring is the control used to observe state and events. Missing logs, impossible travel, account lockout, and resource inaccessibility are indicators analyzed under SY0-701 2.4.