(Unit 7 of 8) Defense-in-depth

Question 1

What is the Defense-In-Depth strategy?

Answer 1

Defense-in-depth as a set of layers, with the data to be secured at the center

Question 2

Name and Describe the layers of defense in the strategy (7
)

Answer 2

Physical security - access to buildings and controlling access to computing hardware

Question 3

Name and Describe the layers of defense in the strategy (6
)

Answer 3

Identity and access - ensuring that identities are secure, that access is granted only to what’s needed, and that sign-in events and changes are logged. (SSO etc)

Question 4

Name and Describe the layers of defense in the strategy (5
)

Answer 4

Perimeter - protects from network-based attacks against your resources. (DDoS , Firewall)

Question 5

Name and Describe the layers of defense in the strategy (4
)

Answer 5

Network - limiting the network connectivity across all your resources to allow only what’s required and reduce risk of attack spreading

Question 6

Name and Describe the layers of defense in the strategy (3
)

Answer 6

Compute - making sure that your compute resources are secure (Endpoint protection)

Question 7

Name and Describe the layers of defense in the strategy (2
)

Answer 7

Application - Integrating security into the application development lifecycle