Defense-in-Depth Quiz

What you'll be asked

1. What is the primary goal of the Defense-in-Depth strategy?
2. Which of the following is an example of a 'Physical' layer control in a Defense-in-Depth architecture?
3. If an organization implements a firewall, an Intrusion Detection System (IDS), and file-level encryption, which security principle are they primarily demonstrating?
4. An administrator wants to secure a web application. They implement an SSL/TLS certificate, a Web Application Firewall (WAF), and strong password policies. Why is this a good example of Defense-in-Depth?
5. In a highly complex environment, how does the 'Defense-in-Depth' principle interact with the 'Principle of Least Privilege' (PoLP)?

Answers and explanations come after you submit.