Layered defense forces attackers to defeat multiple controls, raising operational cost, time, and chance of detection. Zscaler ' s architecture layers identity, connectivity, TLS inspection, ATP, sandboxing, DLP, seg mentation, and analytics rather than relying on one appliance or single signature set. Option A (Layered defense increases costs to attackers to operate) is correct because layered defense increases attacker cost and decreases attacker efficiency.

Why the other options are incorrect:

B. Layered defense from multiple vendor solutions easily share attacker data: Multiple-vendor layering often creates tool silos and inconsistent telemetry. Zscaler’s point is that integrated controls share context in one platform.

C. Layered defense ensures attackers are prevented eventually: “Eventually prevented” is not a security design. Integrated zero trust tries to break the attack chain early and consistently, not hope one layer catches it later.

D. Layered defense with multiple endpoint agents protects from attackers: Stacking endpoint agents can increase conflict and operational overhead. Zscaler’s model reduces reliance on agent sprawl by enforcing policy in the exchange.