Which of the following lists the five D's?

• A. Deter, Deny, Detect, Delay, Destroy.
• B. Deter, Deny, Detect, Delay, Defend.
• C. Deter, Deny, Detect, Detain, Destroy.
• D. Deter, Deny, Detect, Delay, Destroy.

Answer: (C)

The five D's describe a layered security approach: Deter, Deny, Detect, Delay, Destroy. Each step targets a stage in preventing or slowing threats while protecting assets. Deter discourages attempts by signaling that an attack would be unprofitable or risky. Deny strengthens access controls so unauthorized entry is blocked. Detect focuses on sensing a breach as early as possible. Delay buys time for responders by adding obstacles or time buffers. Destroy ensures that, if access is achieved, the asset is rendered unusable or data is unrecoverable.

Detain is not part of this standard sequence. Detention is more of a custody action associated with enforcement rather than a defined protective control within the five D's framework. The emphasis here is on preventing, slowing, and neutralizing threats through deterrence, denial, detection, delay, and destruction—hence the correct concept is Deter, Deny, Detect, Delay, Destroy.