DRAG DROP Match the security components to the appropriate defense in depth layers. To answer, drag the appropriate service from the column on the left to its description on the right. Each service may be used once, more than once, or not at all. NOTE: Each correct match is worth one point 
I thought MFA fits under Physical security since it controls access, software updates/patches should be Identity, and surveillance camera could go with Compute because of monitoring digital assets. That was my guess, saw a chart somewhere that paired them this way. Not 100 percent sure though, open to challenge if someone sees it differently.
- Multifactor authentication (MFA) -> Physical security
- Software updates and patches -> Identity
- Surveillance camera -> Compute
Pretty straightforward if you know the layers. MFA always goes with identity, software updates to compute, surveillance cameras are all about physical security. Would the answer change if "firewall" or "encryption" was listed in any of these buckets?
