An engineer is designing a solution that addresses the following requirements:The security controls must be...

The best answer is D. Deploying heterogeneous security solutions to offer a layered approach . The requirements emphasize redundancy , resilience , and avoiding a situation where a single supply chain attack could disable security operations. A heterogeneous, layered design reduces common-mode failure risk because different products, vendors, and control layers are less likely to fail in the same way at the same time. This also improves resilience against zero-day vulnerabilities , since one vendor’s unknown weakness is less likely to compromise every control simultaneously. CompTIA’s SecurityX objectives explicitly include “Security controls: preventive, detective, corrective, compensating, and deterrent” and “Architecture patterns: resilience, scalability, and performance.” Those objective themes directly support a diverse, layered-control approach.

Why the other options are not best:

A may add support capacity, but it does not inherently provide redundant, diverse technical controls. B is the opposite of the requirement because a single-vendor stack increases supply-chain concentration risk. C may change hosting model, but cloud migration alone does not guarantee redundancy against supply-chain compromise or zero-day resilience. A layered heterogeneous design is the strongest match to all three requirements.