Security Design Principles Flashcards
5 cards from real ISSAP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 5 Security Design Principles flashcards as text
Which of the following is the primary goal of security design principles?
Answer: To reduce vulnerabilities and mitigate risks
The primary goal of security design principles is to build systems that are inherently resilient against attacks. By incorporating these principles, architects aim to minimize potential weaknesses (vulnerabilities) and reduce the likelihood and impact of security incidents (risks).
What is the principle of "least privilege" in security design?
Answer: Limiting access rights to the minimum necessary for a role
The principle of "least privilege" dictates that users, programs, or processes should only be granted the absolute minimum permissions required to perform their legitimate functions. This minimizes the potential damage if an account is compromised, as an attacker would have limited access.
Which security design principle involves dividing a system into smaller parts to reduce overall risk?
Answer: Separation of duties
Separation of duties is a security design principle that involves dividing critical tasks among multiple individuals or components to prevent any single person or entity from having complete control. This reduces the risk of fraud, error, or malicious activity by requiring collusion to compromise the system.
The concept of "defense in depth" relies on which of the following?
Answer: Multiple redundant layers of security controls
"Defense in depth" is a cybersecurity strategy that employs a series of overlapping and redundant security controls to protect information and systems. If one layer of defense fails, subsequent layers are in place to detect and prevent an attack, providing a more robust security posture.
What does the principle of "fail-safe defaults" emphasize?
Answer: Systems should fail in a secure state, restricting access
The principle of "fail-safe defaults" ensures that when a system component fails or an error occurs, it defaults to a secure, restrictive state rather than an open or permissive one. This prevents unauthorized access or data exposure during system malfunctions, maintaining security.