Defense in Depth Strategy Questions

Comprehensive understanding of a layered security approach that uses overlapping preventive and detective controls to reduce risk. Topics include identity and access control, network segmentation and trust boundaries, endpoint protection and detection, data encryption in transit and at rest, secure configuration and hardening, centralized monitoring and logging, vulnerability management and patching, and incident response integration. Candidates should be able to explain how controls interact, trade offs between preventive and detective measures, designing for segmentation and least privilege, and methods to evaluate coverage and residual risk.