Certified Information Systems Security Professional (CISSP) — Question 63

Which of the following should be included in a good defense-in-depth strategy provided by object-oriented programming for software development?

Answer options

• A. Polymorphism
• B. Inheritance
• C. Polyinstantiation
• D. Encapsulation

Correct answer: D

Explanation

Encapsulation is essential in a defense-in-depth strategy because it restricts access to an object's internal state, thereby enhancing security and reducing the risk of unintended interference. While polymorphism, inheritance, and polyinstantiation are important concepts in object-oriented programming, they do not directly contribute to the security aspect that encapsulation provides.