Security Professionals and Layered Security

DLP, sandboxing, vulnerability scanning, penetration testing

Intrusion detection, mail filtering, web proxies, firewalls (correct)

Antivirus, data backup, encryption, biometrics

Virtual private networks, access control lists, tokenization, IDS/IPS

Preventive, detective, and corrective

Internal, external, and cloud-based

Software, hardware, and firmware

Administrative, technical, and physical (correct)

Inadequate training for security professionals

Insufficient investment in security technologies

Lack of regulatory compliance

Bad decisions on the part of users (correct)