Which term is a defense in depth strategy?

Which term is a defense in depth strategy?

• A. Encryption
• B. Layering
• C. Monitoring
• D. Access Control

Answer: (B)

Defense in depth is about using multiple security layers so that if one control fails, others still protect the system. Layering captures this approach: you deploy several independent protections—such as encryption to protect data, access controls to limit who can act, and monitoring to detect breaches—so threats must get through several barriers. This multiplicity reduces risk because each layer addresses different attack vectors and stages, making it harder for an attacker to succeed. Encryption is a specific protection for data confidentiality, but it’s just one layer. Monitoring is about detecting problems, which is important but not the overall strategy by itself. Access control restricts who can do what, another essential control but not the broad approach of combining multiple defenses.

Defense in depth is about using multiple security layers so that if one control fails, others still protect the system. Layering captures this approach: you deploy several independent protections—such as encryption to protect data, access controls to limit who can act, and monitoring to detect breaches—so threats must get through several barriers. This multiplicity reduces risk because each layer addresses different attack vectors and stages, making it harder for an attacker to succeed.

Encryption is a specific protection for data confidentiality, but it’s just one layer. Monitoring is about detecting problems, which is important but not the overall strategy by itself. Access control restricts who can do what, another essential control but not the broad approach of combining multiple defenses.