When designing a secure system architecture, which TWO of the following are primary considerations for achieving the principle of 'Defense in Depth'?
Trap 1: Relying solely on perimeter authentication
Relying on one layer is the opposite of defense in depth.
Trap 2: Maximizing system throughput by minimizing encryption
This prioritizes performance over security and does not contribute to depth.
Trap 3: Implementing a single high-availability firewall
A single point of failure violates the principle of redundancy and depth.
- A
Applying security controls at multiple architectural layers
Layering is the core concept of defense in depth.
- B
Relying solely on perimeter authentication
Why wrong: Relying on one layer is the opposite of defense in depth.
- C
Maximizing system throughput by minimizing encryption
Why wrong: This prioritizes performance over security and does not contribute to depth.
- D
Implementing a single high-availability firewall
Why wrong: A single point of failure violates the principle of redundancy and depth.
- E
Ensuring diversity in security technologies and controls
Using diverse controls prevents a single exploit from bypassing all layers.