Which configuration best supports defense in depth in practice?

Prepare for the Trusted Agent Exam with engaging questions, flashcards, and detailed explanations. Dive deep into essential topics to increase your chances of success. Ace your exam with confidence!

Defense in depth means you don’t rely on a single safeguard. It’s about layering protections across people, processes, and technology and continuously verifying that each layer works and gaps are identified and fixed. The best configuration is layered controls across those three dimensions with ongoing verification.

In practice, this means combining human factors like strict access controls and least privilege, ongoing awareness and training, and clear accountability; robust processes such as change management, incident response, and continuous monitoring; and diverse technology measures—encryption, multi-factor authentication, network segmentation, endpoint protection, logging, and regular backups. Verification ties it all together by testing and auditing the layers, monitoring for failures, and quickly addressing weaknesses so the defense remains effective over time.

Relying solely on encryption at rest focuses on one aspect of security and leaves other areas exposed, such as data in transit, access, and operational gaps. An isolated, single-layer approach provides no redundancy if that layer is breached. A single firewall with the assumption that defense in depth is achieved gives a false sense of security, because a single boundary does not cover internal threats, misconfigurations, or evolving attack techniques.