Web Security · Junior · Question 5 of 75
What is defense in depth?
- 1Putting all security checks into a single, very strict firewall
- ✓Correct answer: Several independent layers of protection, so one failure doesn't expose the whole system
- 3Hiding the source code so attackers can't read it
Explanation
Escaping output, a Content Security Policy and HttpOnly cookies each reduce XSS damage on their own. Together they cover cases where one layer has a bug.