A parks department relies only on a strong password for a public-facing app and calls that defense-in-depth. What is wrong with that claim?
Select an answer to reveal the explanation.
Short Explanation
One strong password is still one layer—like one lock on a glass door. Defense-in-depth means stacking controls so a password failure is not game over. Strong secrets help, but they are not a whole layered program.
Full Explanation
Defense-in-depth requires multiple layers of protection. A single control—even a strong password—does not meet that definition. Municipal teams should combine identity, network, application, and data protections rather than depending on one mechanism.