Which term describes the security approach that uses multiple layers of defense to protect assets?

• A. Defense in depth
• B. Risk reduction
• C. Risk acceptance
• D. Risk transference

Answer: (A)

Defense in depth is the security strategy that protects assets by implementing multiple, independent layers of controls across people, processes, and technology. Each layer guards against different attack paths, so if one control is bypassed, others remain to block, detect, or mitigate the threat. This approach reduces reliance on a single solution and strengthens overall protection with components like firewalls, intrusion detection, strong authentication, encryption, patch management, and physical security working together. The other terms describe risk management concepts rather than a multi-layered protective strategy: risk reduction is about lowering risk in general, risk acceptance means tolerating risk, and risk transference involves shifting risk to another party, such as through insurance.