CyberCertPrepNetwork FundamentalsNetwork Security BasicsEASYFree question
What is 'defense in depth' in network security, and which combination of controls best illustrates the concept?
- A.Using only a single enterprise-grade NGFW to handle all threats
- B.Layering perimeter firewall, network IPS, host-based firewall, endpoint AV, and network segmentation so that bypassing one layer does not compromise the whole system
- C.Encrypting all data at rest and in transit as the single control
- D.Running all servers in the DMZ so they are isolated from internal users
Why B is correct
Defense in depth means using multiple independent security layers (perimeter controls, network controls, host controls, data controls) so that a single failure does not lead to a total breach. NIST SP 800-53 and CompTIA Network+ both describe this concept. A single NGFW (option A) is a single point of failure. Encryption alone (option C) does not address network access control. DMZ placement (option D) is one layer, not a layered approach.
Know someone studying for Network Fundamentals? Send them this one.