Machine-translated by Google. Questions are authored in English.
Top

Discussion

State whether the following is true or false.
Defence in depth means the failure of any one control should not by itself expose the system.

  • A.True only at large scales
  • B.False only at small scales
  • C.True
  • D.False

Answer: C

Correct answer: True

Defence in depth assumes every control will eventually fail or be misconfigured, and arranges matters so that no single failure is sufficient. A database in a private subnet, behind a narrow security group, requiring authentication, encrypted at rest and in transit, and logged, survives the loss of any one of those. It is the reason the layered controls in this topic are used together rather than chosen between.

No comment is present. Be the first to comment.
Loading…

Post your comment

Please log in or register to post a comment.