Which term describes a security strategy that positions layers of diverse security control categories and functions instead of relying solely on perimeter controls?

Which term describes a security strategy that positions layers of diverse security control categories and functions instead of relying solely on perimeter controls?

• A. Perimeter security
• B. Zero trust
• C. Defense in depth
• D. Segmentation

Answer: (C)

Defense in depth means building multiple, overlapping layers of security controls across people, processes, and technology so that if one layer fails, others still protect assets. This approach places diverse control categories and functions throughout the environment rather than depending only on the outer boundary. Think of combining access controls, encryption, monitoring, patch management, MFA, network segmentation, and incident response as a coordinated set of protections. By not relying solely on the perimeter, you reduce risk from breaches that slip past boundary defenses, insider threats, and misconfigurations, and you gain redundancy. Perimeter security focuses on guarding the boundary with controls like firewalls, while segmentation concentrates on dividing networks to limit spread. Zero trust emphasizes continuous verification of every access request; it’s a principle that can be part of a defense-in-depth strategy, but it describes a stance within the layered approach rather than the overall concept of multiple protective layers.

Defense in depth means building multiple, overlapping layers of security controls across people, processes, and technology so that if one layer fails, others still protect assets. This approach places diverse control categories and functions throughout the environment rather than depending only on the outer boundary. Think of combining access controls, encryption, monitoring, patch management, MFA, network segmentation, and incident response as a coordinated set of protections. By not relying solely on the perimeter, you reduce risk from breaches that slip past boundary defenses, insider threats, and misconfigurations, and you gain redundancy.

Perimeter security focuses on guarding the boundary with controls like firewalls, while segmentation concentrates on dividing networks to limit spread. Zero trust emphasizes continuous verification of every access request; it’s a principle that can be part of a defense-in-depth strategy, but it describes a stance within the layered approach rather than the overall concept of multiple protective layers.