GSEC Defense-in-Depth

Question 1

What is the primary goal of a defense-in-depth strategy?

Accepted Answer

To provide overlapping layers of security

Answer

To minimize the number of security layers.

Answer

To make it difficult for users to access resources.

Answer

To reduce operational costs.

Question 2

Which of the following is an example of a defense-in-depth layer?

Accepted Answer

Using multiple security measures to protect data and systems

Answer

Only using firewalls.

Answer

Relying solely on physical security.

Answer

Relying solely on endpoint security.

Question 3

What is a key advantage of implementing defense-in-depth in an organization?

Accepted Answer

It makes systems more resilient to various types of attacks

Answer

It reduces the complexity of the security system.

Answer

It increases the overall cost of security.

Answer

It eliminates the need for access controls.

Question 4

What does the principle of 'least privilege' mean in defense-in-depth?

Accepted Answer

Granting users only the access they need to perform their jobs

Answer

Giving users maximum access to all systems.

Answer

Allowing users to access all systems and resources.

Answer

Providing unrestricted access to sensitive data.

Question 5

Why is defense-in-depth important for protecting data?

Accepted Answer

It ensures that data is protected from a variety of threats

Answer

It only protects physical assets.

Answer

It reduces the need for strong encryption.

Answer

It focuses only on software security.