200-201 · Question #416
What is the principle of defense-in-depth?
The correct answer is B. Several distinct protective layers are involved. Defense-in-depth is a cybersecurity strategy that involves the implementation of multiple layers of security controls, mechanisms, and safeguards throughout an organization's IT infrastructure. The principle aims to create a layered defense approach, where various security…
Question
What is the principle of defense-in-depth?
Options
- AAgentless and agent-based protection for security are used.
- BSeveral distinct protective layers are involved.
- CAccess control models are involved.
- DAuthentication, authorization, and accounting mechanisms are used.
How the community answered
(39 responses)- A3% (1)
- B95% (37)
- C3% (1)
Explanation
Defense-in-depth is a cybersecurity strategy that involves the implementation of multiple layers of security controls, mechanisms, and safeguards throughout an organization's IT infrastructure. The principle aims to create a layered defense approach, where various security measures are employed at different levels within the network, systems, applications, and data to mitigate risks and protect against diverse threats. This strategy involves using a combination of technical, administrative, and physical controls, such as firewalls, intrusion detection systems, antivirus software, access controls, encryption, employee training, and more, to provide redundancy and enhance overall security posture.
Topics
Community Discussion
No community discussion yet for this question.