nerdexam
(ISC)2

SSCP · Question #782

Good security is built on which of the following concept?

The correct answer is B. The Concept of defense in depth. Defense in depth (also called layered security) is the overarching philosophy of good security design. The concept borrows from military strategy: rather than relying on a single control or barrier, you layer multiple, independent security controls so that if one fails, others…

Submitted by lars.no· Apr 18, 2026Security Concepts and Practices

Question

Good security is built on which of the following concept?

Options

  • AThe concept of a pass-through device that only allows certain traffic in and out
  • BThe Concept of defense in depth
  • CThe Concept of Preventative controls
  • DThe Concept of Defensive Controls

How the community answered

(30 responses)
  • B
    93% (28)
  • C
    3% (1)
  • D
    3% (1)

Explanation

Defense in depth (also called layered security) is the overarching philosophy of good security design. The concept borrows from military strategy: rather than relying on a single control or barrier, you layer multiple, independent security controls so that if one fails, others still provide protection. This means combining preventative controls (firewalls, access controls), detective controls (IDS/SIEM), corrective controls (incident response), and administrative policies together. No single control is considered sufficient on its own. Defense in depth is a foundational principle recognized across frameworks like NIST, ISO 27001, and DoD security models.

Topics

#Security architecture#Defense in depth#Security principles#Layered security

Community Discussion

No community discussion yet for this question.

Full SSCP Practice