Question 1
4 marks
Defining threat landscape and address whitelisting
- Networks
(a)
2 marks
- Explain the concept of an enterprise threat landscape:
- The threat landscape denotes the comprehensive spectrum of active and emerging cyber hazards, exploits, vulnerabilities, and malware strains targeting digital assets across networks.
- It encompasses classifications based on severity levels, incident frequencies, threat actor vectors, and potential operational impacts on enterprise systems.
Mentor tip
Cover both the variety of security risks and the contextual evaluation of likelihood or impact.
(b)
2 marks
- Define the security mechanism of whitelisting:
- Whitelisting is an explicit authorization paradigm where an administrator compiles a verified inventory of permitted entities, such as approved domain names, IP ranges, or applications.
- Any network traffic, communication attempt, or software execution from an entity outside this pre-authorized registry is systematically denied transit by perimeter defenses.
Mentor tip
State clearly that only explicitly approved items are allowed through, while all unlisted entities are blocked by default.
