nerdexam
EC-Council

312-50V11 · Question #467

What network security concept requires multiple layers of security controls to be placed throughout an IT infrastructure, which improves the security posture of an organization to defend against malic

The correct answer is C. Defense in depth. Defense in depth is a security strategy that layers multiple overlapping controls throughout an IT infrastructure so that if one control fails, others remain effective. It directly addresses the need to improve overall security posture against attacks and vulnerabilities.

Information Security and Ethical Hacking Fundamentals

Question

What network security concept requires multiple layers of security controls to be placed throughout an IT infrastructure, which improves the security posture of an organization to defend against malicious attacks or potential vulnerabilities?

Options

  • ASecurity through obscurity
  • BHost-Based Intrusion Detection System
  • CDefense in depth
  • DNetwork-Based Intrusion Detection System

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    95% (37)

Why each option

Defense in depth is a security strategy that layers multiple overlapping controls throughout an IT infrastructure so that if one control fails, others remain effective. It directly addresses the need to improve overall security posture against attacks and vulnerabilities.

ASecurity through obscurity

Security through obscurity relies on hiding system details to deter attackers, which is a single weak measure rather than a strategy of layered controls distributed throughout infrastructure.

BHost-Based Intrusion Detection System

A Host-Based Intrusion Detection System is a single monitoring tool installed on individual endpoints, not a multi-layer security strategy spanning an entire IT infrastructure.

CDefense in depthCorrect

Defense in depth mandates distributing multiple security controls - such as firewalls, IDS, endpoint protection, and access controls - across every layer of an IT infrastructure. Each layer compensates for weaknesses in adjacent layers, so a bypass of one control does not compromise the entire environment. This strategy directly matches the question's description of layered controls improving an organization's security posture.

DNetwork-Based Intrusion Detection System

A Network-Based Intrusion Detection System monitors traffic at specific network points but is a single-layer detection tool, not a comprehensive strategy of multiple layered controls.

Concept tested: Defense in depth layered security strategy

Source: https://csrc.nist.gov/glossary/term/defense_in_depth

Topics

#defense in depth#layered security#security controls#IT infrastructure

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice