A planner at a logistics hub wants to purchase a single security product whose brochure calls that product the entire defense-in-depth strategy. What should the security lead say is the accurate correction?
Select an answer to reveal the explanation.
Short Explanation
A toolbox is not a floor plan just because the label says complete kit. You describe defense in depth as different controls layered together. The trap is buying one product, or limiting the idea to only the network or only training.
Full Explanation
The right selection is "Defense in depth is the layering of different controls, and no product name is that strategy". The strategy is the arrangement of unlike controls so that one layer covers a miss of another, and a product can occupy only some of those layers. The statement "Buying the single product named in the brochure is what completes the defense-in-depth principle" stops at the purchase and never asks which misses that product still has. The statement "Defense in depth covers only network devices and leaves host and application controls out" drops host, application, and process layers that the strategy is supposed to include. The statement "Defense in depth covers only user training and treats every technical control as optional" drops the technical layers and leaves a single human control standing in for the set. Exam caveat: a product may be one useful layer, and the strategy remains the set of layers around it. Operational check: list network, host, application, and handling controls at the hub and mark the layers the brochure product does not cover.