312-50V11 · Question #467
What network security concept requires multiple layers of security controls to be placed throughout an IT infrastructure, which improves the security posture of an organization to defend against malic
The correct answer is C. Defense in depth. Defense in depth is a security strategy that layers multiple overlapping controls throughout an IT infrastructure so that if one control fails, others remain effective. It directly addresses the need to improve overall security posture against attacks and vulnerabilities.
Question
What network security concept requires multiple layers of security controls to be placed throughout an IT infrastructure, which improves the security posture of an organization to defend against malicious attacks or potential vulnerabilities?
Options
- ASecurity through obscurity
- BHost-Based Intrusion Detection System
- CDefense in depth
- DNetwork-Based Intrusion Detection System
How the community answered
(39 responses)- A3% (1)
- B3% (1)
- C95% (37)
Why each option
Defense in depth is a security strategy that layers multiple overlapping controls throughout an IT infrastructure so that if one control fails, others remain effective. It directly addresses the need to improve overall security posture against attacks and vulnerabilities.
Security through obscurity relies on hiding system details to deter attackers, which is a single weak measure rather than a strategy of layered controls distributed throughout infrastructure.
A Host-Based Intrusion Detection System is a single monitoring tool installed on individual endpoints, not a multi-layer security strategy spanning an entire IT infrastructure.
Defense in depth mandates distributing multiple security controls - such as firewalls, IDS, endpoint protection, and access controls - across every layer of an IT infrastructure. Each layer compensates for weaknesses in adjacent layers, so a bypass of one control does not compromise the entire environment. This strategy directly matches the question's description of layered controls improving an organization's security posture.
A Network-Based Intrusion Detection System monitors traffic at specific network points but is a single-layer detection tool, not a comprehensive strategy of multiple layered controls.
Concept tested: Defense in depth layered security strategy
Source: https://csrc.nist.gov/glossary/term/defense_in_depth
Topics
Community Discussion
No community discussion yet for this question.