Which steps might a company take to prevent unauthorized access?

Which steps might a company take to prevent unauthorized access?

• A. Neither A nor B
• B. Requiring a username and password to access its computer system
• C. Constructing a firewall to protect its computer system
• D. Both A and B

Answer: (D)

Defense in depth means using more than one security control so protection isn’t dependent on a single measure. Requiring a username and password verifies who is trying to access the system, establishing an identity check. A firewall provides a barrier at the network edge, blocking or filtering unauthorized traffic from reaching the system. Together, these two controls address both identity and access at the network level, offering a stronger defense than relying on one method alone. Password-based authentication reduces unauthorized entry by confirming credentials, while a firewall limits the ways external actors can even reach the system, making it harder for intruders to succeed. By applying both measures, the company adds multiple layers of protection, which is the most effective approach to prevent unauthorized access.

Defense in depth means using more than one security control so protection isn’t dependent on a single measure. Requiring a username and password verifies who is trying to access the system, establishing an identity check. A firewall provides a barrier at the network edge, blocking or filtering unauthorized traffic from reaching the system. Together, these two controls address both identity and access at the network level, offering a stronger defense than relying on one method alone. Password-based authentication reduces unauthorized entry by confirming credentials, while a firewall limits the ways external actors can even reach the system, making it harder for intruders to succeed. By applying both measures, the company adds multiple layers of protection, which is the most effective approach to prevent unauthorized access.