Which two elements are used by the defense-in-depth strategy? (Choose two.)

Question

Options

• Adistributed database management system
• Bleast privilege principle
• Cfirewalls
• Dpacket segmentation
• Esingle unified security solution

• A
  6% (1)
• B
  76% (13)
• D
  6% (1)
• E
  12% (2)

Explanation

The defense-in-depth strategy is a layered security approach that involves using multiple security measures to protect systems and data. It is designed to ensure that if one layer of defense fails, other layers still provide protection. Least privilege ensures that users and systems have limited access, so even if one part of the system is compromised, the impact is minimized. Firewalls protect the perimeter and internal segments of the network, stopping attackers from easily reaching critical areas. Together, they address different layers: access control (least privilege) and network security (firewalls). While distributed database management system is may provide resilience and efficiency in handling data, it is not directly related to security or defense- in-depth. It focuses on data availability and management, not protection. While network segmentation is an important security measure, packet segmentation is not a recognized term or strategy related to defense-in-depth. Packet segmentation refers to splitting data packets for transmission, which is a networking concept rather than a security mechanism. Defense-in-depth relies on multiple layers of security rather than a single solution. A unified solution contradicts the core idea of having multiple, independent layers of defense.

No community discussion yet for this question.