Defense-in-Depth/Layered Security is best described as?

Defense-in-Depth/Layered Security is best described as?

• A. Outsourcing Security
• B. An Approach to Deploying a Single Layer of Security Controls
• C. Relying Solely on Antivirus
• D. An Approach That Involves Deploying Multiple Layers of Security Controls and Measures to Protect Systems and Data

Answer: (C)

Defense-in-depth is the practice of layering multiple security controls across people, processes, and technology to protect systems and data. The idea is that no single control is perfect, so overlapping layers provide redundancy and compensate for weaknesses. If one measure is bypassed, others still stand to stop or slow an attacker and increase the chances of detecting an intrusion early. Layers can include preventive controls (firewalls, access controls, MFA, patch management), detective controls (security monitoring, intrusion detection, log analysis), and response/recovery measures (backups, incident response planning, disaster recovery). Relying on antivirus alone misses newer threats and sophisticated attacks, and outsourcing security or deploying just one protective measure does not provide the multiple barriers that defense-in-depth aims to create. The essence is deploying multiple, overlapping safeguards to protect systems and data.

Defense-in-depth is the practice of layering multiple security controls across people, processes, and technology to protect systems and data. The idea is that no single control is perfect, so overlapping layers provide redundancy and compensate for weaknesses. If one measure is bypassed, others still stand to stop or slow an attacker and increase the chances of detecting an intrusion early. Layers can include preventive controls (firewalls, access controls, MFA, patch management), detective controls (security monitoring, intrusion detection, log analysis), and response/recovery measures (backups, incident response planning, disaster recovery). Relying on antivirus alone misses newer threats and sophisticated attacks, and outsourcing security or deploying just one protective measure does not provide the multiple barriers that defense-in-depth aims to create. The essence is deploying multiple, overlapping safeguards to protect systems and data.