If the time an attacker takes to break through the organization's preventive controls is greater than the sum of the time required to detect the attack and the time required to respond to the attack,then security is
A)effective.
B)ineffective.
C)overdone.
D)undermanaged.

Question

Quizplus · Accepted Answer

This scenario describes a situation where the organization's preventive controls have effectively delayed or deterred an attacker's attempt to breach the system. The fact that the time to detect and respond to the attack is lower than the time taken to break through the preventive controls suggests that the organization has effectively implemented detection and response mechanisms. Therefore, security is effective.

If the Time an Attacker Takes to Break Through the Organization's