NCAE Mapping Hub
Security+ ยท 1.0 General Security Concepts

Defense in depth

Layer multiple, independent security controls so that if one fails, others still protect the asset. Not a specific control. an architectural pattern.

How this shows up at NCAE

Firewall at the router + host iptables + fail2ban + application auth + file-system permissions all protecting the same SSH service. No single layer is enough; together they are resilient.