Question

An e-commerce company earns nearly all its revenue during a two-week holiday sales window. During last year's window, a volumetric distributed denial-of-service (DDoS) attack made the storefront unreachable for several hours, causing significant lost sales. The CISO wants to prioritize a control that most directly addresses the property of the CIA triad that failed in this incident. Which control should the CISO prioritize?

Accepted Answer

Contract a cloud-based DDoS mitigation and traffic-scrubbing service with elastic scaling

Answer

Deploy end-to-end TLS encryption for all customer transactions

Answer

Implement file-integrity monitoring and cryptographic hashing of the product catalog

Answer

Enforce multifactor authentication for all customer and administrator accounts