Question 120
At the Goldport recruitment company, a security gateway blocks a recycled benign cloud IP using intelligence from several years ago. Which ongoing control best prevents this issue from recurring?
Explanation
Correct Answer
The needed prevention is to measure false positive rates and feed staleness. It directly sustains the original change to apply indicator validity windows confidence and de-listing review before enforcement.
Incorrect Answers
That routine supports intelligence source confidence, but the relevant ongoing risk requires the team to measure false positive rates and feed staleness. For the Goldport recruitment company, the direct corrective action is to apply indicator validity windows confidence and de-listing review before enforcement.
Review model artifact origins and dependency versions during upgrades is not the primary recurring safeguard for this problem. The team should measure false positive rates and feed staleness. For the Goldport recruitment company, the direct corrective action is to apply indicator validity windows confidence and de-listing review before enforcement.
Review allowed traffic dependencies after application changes. That safeguard would help prevent recurrence of: Flat east-west connectivity enables lateral movement after endpoint compromise. The risk being reviewed here is instead: Historical compromise evidence does not prove current malicious ownership. The matching ongoing control is: Measure false positive rates and feed staleness.