What security strategy places several protection layers throughout an information system?

What security strategy places several protection layers throughout an information system?

• A. Internet Zone
• B. EISA
• C. Defense-in-Depth
• D. Internet DMZ

Answer: (C)

Layered security across the system means placing multiple, overlapping protections at different points so no single failure can expose the whole environment. This approach, often called defense-in-depth, ensures that if one barrier is bypassed, others still stand between attackers and valuable assets. Think of combining perimeter controls like firewalls and IDS with network segmentation, strong authentication, access controls, encryption, secure configurations, and continuous monitoring. The idea is to create multiple lines of defense that cover people, processes, and technology. This differs from a single-zone setup like a DMZ, which focuses on isolating publicly accessible servers rather than providing multiple, layered safeguards throughout the entire information system. The other options refer to concepts not about layering defenses across the system (older hardware standards or browser/firewall zone terms).

Layered security across the system means placing multiple, overlapping protections at different points so no single failure can expose the whole environment. This approach, often called defense-in-depth, ensures that if one barrier is bypassed, others still stand between attackers and valuable assets. Think of combining perimeter controls like firewalls and IDS with network segmentation, strong authentication, access controls, encryption, secure configurations, and continuous monitoring. The idea is to create multiple lines of defense that cover people, processes, and technology.

This differs from a single-zone setup like a DMZ, which focuses on isolating publicly accessible servers rather than providing multiple, layered safeguards throughout the entire information system. The other options refer to concepts not about layering defenses across the system (older hardware standards or browser/firewall zone terms).