Model where authentication is combined with authorization and monitoring as layered protections?

Model where authentication is combined with authorization and monitoring as layered protections?

• A. Layered Security in IAM
• B. Defense-in-Depth
• C. Access Control Layer
• D. Cost Justification

Answer: (B)

Defense-in-Depth is the security approach that stacks multiple protective layers so authentication, authorization, and monitoring work together as overlapping defenses. In a CIAM context, you first verify identity (authentication), then enforce what that identity can do (authorization), and continuously observe for suspicious behavior (monitoring). Because these layers address different angles and can detect or block threats at various stages, compromising one layer doesn’t expose the whole system; others remain to protect and alert. This is why it best matches the idea of combining authentication, authorization, and monitoring as layered protections. The other options don’t capture a multi-layered protective strategy: a generic Layered Security phrase isn’t the standard term here, an Access Control Layer is a specific component, and Cost Justification is unrelated to the security model.

Defense-in-Depth is the security approach that stacks multiple protective layers so authentication, authorization, and monitoring work together as overlapping defenses. In a CIAM context, you first verify identity (authentication), then enforce what that identity can do (authorization), and continuously observe for suspicious behavior (monitoring). Because these layers address different angles and can detect or block threats at various stages, compromising one layer doesn’t expose the whole system; others remain to protect and alert. This is why it best matches the idea of combining authentication, authorization, and monitoring as layered protections. The other options don’t capture a multi-layered protective strategy: a generic Layered Security phrase isn’t the standard term here, an Access Control Layer is a specific component, and Cost Justification is unrelated to the security model.