One of the key components to a security program includes a term called defense in depth.Which of the following would not be a component or true statement regarding defense in depth?

User education in opposition to the company's policies abd procedures

defense in depth will increase and attackers risk of detection

it includes layered security everywhere from policies and procedures,physical security,the perimeter,internal network,the hosts and the applications and data

it may include the use of firewalls and a NIDS