Viewing a computer OS as having kernel, device drivers layer, service layer, and applications layer, defense in depth means

the deepest later $($kernel$)$ should be protected $.$

all layers should be protected.

the applications layer should be proetcted.

the services layer should be protected.