nerdexam
EC-Council

312-50V11 · Question #765

Which security strategy requires using several, varying methods to protect IT systems against attacks?

The correct answer is A. Defense in depth. Defense in depth is the security strategy that employs multiple, overlapping layers of controls so that the failure of one layer does not compromise the entire system.

Information Security and Ethical Hacking Fundamentals

Question

Which security strategy requires using several, varying methods to protect IT systems against attacks?

Options

  • ADefense in depth
  • BCovert channels
  • CExponential backoff algorithm
  • DThree-way handshake

How the community answered

(48 responses)
  • A
    92% (44)
  • B
    4% (2)
  • C
    2% (1)
  • D
    2% (1)

Why each option

Defense in depth is the security strategy that employs multiple, overlapping layers of controls so that the failure of one layer does not compromise the entire system.

ADefense in depthCorrect

Defense in depth applies several varied security controls - such as firewalls, intrusion detection systems, encryption, and access controls - at different layers of an IT environment, ensuring no single point of failure can expose the whole system. This layered approach means an attacker who bypasses one control is still confronted by additional independent barriers.

BCovert channels

Covert channels are hidden communication paths used to exfiltrate data outside of normal monitored channels, not a protective multi-layer security strategy.

CExponential backoff algorithm

Exponential backoff is a network retry algorithm that progressively increases wait time between retransmission attempts after collisions or failures, unrelated to security layering.

DThree-way handshake

The three-way handshake is the TCP connection establishment mechanism (SYN, SYN-ACK, ACK) and is a transport-layer protocol process, not a security protection strategy.

Concept tested: Defense in depth layered security strategy

Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final

Topics

#defense in depth#layered security#security strategy

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice