QuestionQ240Verified/Security Architecture and EngineeringCopy linkReport a problemAsk AstroTutorSave questionWhich of the following BEST illustrates a defense-in-depth concept?ANetwork-based data loss prevention (DLP), Network Access Control (NAC), network-based Intrusion prevention system (NIPS), Port security on core switchesBHost-based data loss prevention (DLP), Endpoint anti-malware solution, Host-based integrity checker, Laptop locks, hard disk drive (HDD) encryptionCEndpoint security management, network intrusion detection system (NIDS), Network Access Control (NAC), Privileged Access Management (PAM), security information and event management (SIEM)DWeb application firewall (WAF), Gateway network device tuning, Database firewall, Next-Generation Firewall (NGFW), Tier-2 demilitarized zone (DMZ) tuningShow AnswerAnswerExplanationDefense in depth combines complementary controls at different layers, including physical protection, endpoint protection, integrity monitoring, data-loss controls, and encryption. Laptop locks, anti-malware, host integrity checking, host-based DLP, and HDD encryption collectively provide overlapping protection for both the device and its data.Show comments14Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion