nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #415

What is the PRIMARY goal of enforcing defense in depth?

The correct answer is D. Prevent or deter a cyberattack using multiple layers of security measures. Defense in depth is a layered security strategy where multiple independent controls (firewalls, IDS, encryption, access controls, etc.) are stacked so that if one layer fails, others still provide protection. The goal is not to make a network impenetrable or to guarantee zero…

Security Principles

Question

What is the PRIMARY goal of enforcing defense in depth?

Options

  • AMake the organization's network impenetrable to attacks
  • BGuarantee that no cyberattacks will occur
  • CReplace outdated security measures with more advanced ones
  • DPrevent or deter a cyberattack using multiple layers of security measures

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    8% (3)
  • D
    87% (34)

Explanation

Defense in depth is a layered security strategy where multiple independent controls (firewalls, IDS, encryption, access controls, etc.) are stacked so that if one layer fails, others still provide protection. The goal is not to make a network impenetrable or to guarantee zero attacks-both are unrealistic-but to make it significantly harder for attackers to succeed by forcing them through multiple barriers. It deters and slows attacks rather than promising absolute prevention.

Topics

#Defense in depth#Security principles#Layered security#Risk mitigation

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice