CyberCertPrepSecurity FundamentalsSecurity PrinciplesEASYFree question
What is the concept of 'defense in depth'?
- A.Implementing multiple layers of security controls so that if one fails, others still protect the system
- B.Using the strongest single security measure available
- C.Placing all security equipment in one central location
- D.Defending only the network perimeter
Why A is correct
Defense in depth (also called layered security) uses multiple overlapping security controls at different levels (network, host, application, data). If an attacker bypasses one layer (e.g., the firewall), additional layers (e.g., intrusion detection, endpoint protection, access controls) still provide protection.
Know someone studying for Security Fundamentals? Send them this one.