Information Security: Principles and Practices 2nd Edition by Jim Breithaupt, Mark S. Merkow

Exercise 13

Defense in depth is needed to assure that which three mandatory activities are present in a security system?

A. prevention, response, and prosecution

B. response, collection of evidence, and prosecution

C. prevention, detection, and response

D. prevention, response, and management

Step 1 of 2

Three activities of defense in depth

Defense in Depth is defined as security that is implemented in many layers. It ensures prevention, detection and response to secure the valuable assets.

In terms of Information security, the defense in depth implies that the security devices should be layered in series which ensures prevention, detection and response towards the attacks on the system and data.

Thus, the three mandatory activities that are present in a security system are prevention, detection and response.

Therefore, the correct option is.