Certified Cloud Security Professional (CCSP) — Question 85

In attempting to provide a layered defense, the security practitioner should convince senior management to include security controls of which type?

Answer options

• A. Physical
• B. All of the above
• C. technological
• D. Administrative

Correct answer: B

Explanation

The correct answer is B, as a layered defense requires a combination of physical, technological, and administrative controls to be effective. Relying on just one type of control would leave vulnerabilities that could be exploited, making it essential to implement a comprehensive approach.