Why one control is never enough, how layers that prevent, detect and respond work together, and a phishing scenario where any one of three layers can stop the attack. From Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight.

In this deep dive

• The vocabulary objective 1.1 assumes you already have, and why control categories and control types answer two different questions
• Why a single firewall leaves an attacker relatively unrestricted access once it's bypassed
• Building layers: perimeter firewall, network segmentation, endpoint protection and MFA, all wrapped around the data
• Layers that prevent, detect and respond, and why they shouldn't duplicate the same weakness
• A phished password scenario where MFA, segmentation and monitoring each get a chance to stop the attacker

This segment is from Domain 1, General Security Concepts, of Chris's new CompTIA Security+ (SY0-801) course on Pluralsight.

Links

• CompTIA Security+ (SY0-801): General Security Concepts (Pluralsight)
• All of Chris Rees's Pluralsight courses
• Watch this lesson on YouTube
• Security+ study guides

Transcript and links: https://www.skillthropic.com/podcast/defense-in-depth-deep-dive?utm_source=podcast&utm_medium=audio&utm_campaign=defense-in-depth-deep-dive

Study guides for Security+, CySA+, CISSP, CCSP and CompTIA SecAI+: skillthropic.com