In defense in depth, which term represents the idea of providing multiple overlapping protections?

In defense in depth, which term represents the idea of providing multiple overlapping protections?

• A. Diversity
• B. Encryption
• C. Simplicity
• D. Limiting

Answer: (A)

Diversity is the term that captures providing multiple overlapping protections. In defense in depth, you layer different kinds of safeguards so that if one control is bypassed, others still stand between the attacker and the asset. Using diverse controls—different technologies, vendors, and approaches—forces attackers to defeat multiple, distinct defenses, each with its own failure modes. This reduces the risk of a single vulnerability causing a complete breach. For example, combining network segmentation, firewalls, intrusion detection, access controls, encryption, and physical security covers different aspects of the system and mitigates common-mode failures. The other options don’t express that idea: encryption is a single protective measure, simplicity isn’t about layering protections, and limiting describes reducing exposure rather than creating overlapping barriers.

Diversity is the term that captures providing multiple overlapping protections. In defense in depth, you layer different kinds of safeguards so that if one control is bypassed, others still stand between the attacker and the asset. Using diverse controls—different technologies, vendors, and approaches—forces attackers to defeat multiple, distinct defenses, each with its own failure modes. This reduces the risk of a single vulnerability causing a complete breach. For example, combining network segmentation, firewalls, intrusion detection, access controls, encryption, and physical security covers different aspects of the system and mitigates common-mode failures. The other options don’t express that idea: encryption is a single protective measure, simplicity isn’t about layering protections, and limiting describes reducing exposure rather than creating overlapping barriers.