iSACA Cybersecurity Fundamentals Certification Practice Exam

What does overlapping redundancy in cybersecurity refer to?

1. Multiple controls that provide the same function

2. Two or more controls that work in parallel to protect an asset

3. Segregation of access to resources

4. Vertical layering of defenses

The correct answer is: Two or more controls that work in parallel to protect an asset

Overlapping redundancy in cybersecurity specifically refers to the implementation of two or more controls that function in parallel to enhance the protection of an asset. This approach is designed to ensure that if one security measure fails or is circumvented, an alternative measure is still in place to offer protection. By employing multiple layers or types of controls that address the same potential vulnerability, organizations can reduce the risk of an incident leading to a breach. Using overlapping controls leads to a more resilient security posture, as attackers must overcome several barriers rather than just one, increasing the likelihood that their actions will be detected or thwarted. This technique is critical in scenarios where the consequences of a failure could be severe. In contrast, the other options refer to different aspects of cybersecurity. Using multiple controls that provide the same function means redundancy, but it does not specifically emphasize the parallel operational aspect that enhances resilience. Segregation of access to resources relates to limiting permissions and access rights, while vertical layering of defenses involves different levels of security stacked upon one another, focusing on depth rather than the simultaneous protection that overlapping redundancy offers.