ISC2 Certified in Cybersecurity (CC) Practice Question

Defense in depth relies on multiple independent security layers so that the failure or evasion of any single control does not expose the organization. Combining a network firewall to filter traffic, endpoint antivirus to stop malware, and user awareness training to reduce human error applies technical, administrative, and procedural safeguards at different layers. The other options implement only one control or even weaken security, so they do not demonstrate true defense in depth.