jperezduerto.info
Security in depth · Unit 26 · Lesson 2 of 4
A bastion concentrates a boundary
Review a recovery access plan without losing the controls a gateway normally provides.
Helpful before thisPivoting, proxies, and network boundaries
After this lesson you can
- Compare two gateway recovery proposals against explicit identity, scope, and accountability requirements.
One idea. One situation. One reasoned decision.
How it works
A bastion or managed access gateway provides a controlled administrative entry point. Its value depends on strong identity, limited destinations, logging, maintenance, and clear ownership. Because it concentrates access, it can become an important dependency and a high-value administrative system. Plan availability and emergency access without silently creating unrestricted alternate paths.
Plan the gateway’s unavailable state
A fictional team administers a records service through a managed gateway. Its requirements are named administrators, access to approved destinations only, and a retained action record. The gateway is unavailable during a planned exercise.
| Proposal | Recovery design |
|---|---|
| A | Shared emergency account; unrestricted destinations; no named session record |
| B | Named emergency identities; only the records service; 30-minute approval; retained action records |
Worked decision: B addresses the stated control requirements on paper. A removes accountability and destination scope precisely when the normal gateway is unavailable. Convenience alone does not satisfy the review.
B still needs a rehearsal. Confirm who can activate it, whether identity verification works during the outage, how expiry is enforced, and whether the destination’s action records are actually retained. A design table is not evidence of operational availability.
Check dependencies too: an emergency path that needs the failed gateway to issue its credentials may fail at the same time. Document a controlled recovery mechanism with a responsible owner. Centralizing administration can simplify normal oversight, but it also concentrates operational importance. The acceptance decision should cover both the normal path and the bounded recovery state.
The key distinction: A controlled entry point is one layer in the access path.
Check yourself
No timer. No penalties. Read the explanation and try again whenever you like.
This lesson’s questions have changed. Your reading progress is saved; review the updated questions.
-
Which review conclusion is justified by these proposals?
Show the answer
Correct answer: Select B for controlled rehearsal and verify its controls and outage dependencies before acceptance. B addresses the stated requirements, while rehearsal evidence is needed to establish that the recovery design actually works.
Try it
- WriteWrite three acceptance checks for plan B, including evidence from a rehearsal. Identify one dependency that could make the recovery plan fail with the primary gateway.