What does 'defense in depth' entail in cybersecurity?

What does 'defense in depth' entail in cybersecurity?

• A. Using a single firewall to protect data
• B. Employing multiple layers of security controls
• C. Focusing solely on physical security measures
• D. Regularly updating passwords

Answer: (B)

Defense in depth means layering multiple security controls across people, processes, and technology so that if one layer fails, others still stand to protect data and systems. It’s about building redundancy and coverage across different domains—network, endpoints, identities, data, and even physical factors—so no single weakness leads to a breach. In practice, you’d mix firewalls with intrusion detection, endpoint protection, multi-factor authentication, strict access controls, regular patching, secure configurations, backups, and user training. Each layer reduces risk in a different way and can also detect or slow attackers, giving time to respond. This is why the option describing multiple layers of security controls is the best choice. Relying on a single firewall, for example, leaves plenty of gaps—attackers can bypass or exploit misconfigurations, insiders, or internal networks. Focusing only on physical security ignores cyber threats that travel through digital channels. Regularly updating passwords is important, but it’s only one part of a broader defense strategy rather than the overall approach of defense in depth.

Defense in depth means layering multiple security controls across people, processes, and technology so that if one layer fails, others still stand to protect data and systems. It’s about building redundancy and coverage across different domains—network, endpoints, identities, data, and even physical factors—so no single weakness leads to a breach. In practice, you’d mix firewalls with intrusion detection, endpoint protection, multi-factor authentication, strict access controls, regular patching, secure configurations, backups, and user training. Each layer reduces risk in a different way and can also detect or slow attackers, giving time to respond.

This is why the option describing multiple layers of security controls is the best choice. Relying on a single firewall, for example, leaves plenty of gaps—attackers can bypass or exploit misconfigurations, insiders, or internal networks. Focusing only on physical security ignores cyber threats that travel through digital channels. Regularly updating passwords is important, but it’s only one part of a broader defense strategy rather than the overall approach of defense in depth.