Câu 123: Isaca Certified Information Security Manager

An organization is in the process of adopting a hybrid data infrastructure, transferring all non-core applications to cloud service providers, and maintaining all core business functions in-house. The information security manager has determined a defense in depth strategy should be used. Which of the following BEST describes this strategy?

1. A. Separate security controls for applications, platforms, programs, and endpoints — đáp án hiện tại
2. B. Multi-factor login requirements for cloud service applications, timeouts, and complex passwords
3. C. Deployment of nested firewalls within the infrastructure
4. D. Strict enforcement of role-based access control (RBAC)