CCSP · Question #769
In attempting to provide a layered defense, the security practitioner should convince senior management to include security controls of which type?
The correct answer is B. All of the above. Defense in depth (layered defense) requires controls across all three categories: Administrative (policies, procedures, training), Technical/Technological (firewalls, encryption, IDS), and Physical (locks, guards, cameras). Relying on only one type creates gaps. A truly robust…
Question
In attempting to provide a layered defense, the security practitioner should convince senior management to include security controls of which type?
Options
- APhysical
- BAll of the above
- Ctechnological
- DAdministrative
How the community answered
(38 responses)- A8% (3)
- B87% (33)
- C3% (1)
- D3% (1)
Explanation
Defense in depth (layered defense) requires controls across all three categories: Administrative (policies, procedures, training), Technical/Technological (firewalls, encryption, IDS), and Physical (locks, guards, cameras). Relying on only one type creates gaps. A truly robust security posture demands that all three control types work together to protect assets at multiple layers.
Topics
Community Discussion
No community discussion yet for this question.