Certified Information Systems Security Professional CISSP · Free Practice Question Easy
Question 70
- A Simplicity
- B Secure defaults
- C Defense in depth
- D Shared responsibility
Reveal correct answer
Correct answer: A
Explanation
Correct Answer:
A is correct. The secure design principal of simplicity states that the more complex the system is, the more difficult it is to understand protected; therefore, security architecture design should be as simple as possible.
Incorrect Answers:
B is incorrect. Secure defaults refer to the principal in which a system starts in a secure state, versus a state of wide functionality.
C is incorrect. Defense in depth is a secure design principal that makes use of multilayered security controls, dispersed throughout an infrastructure, as a method of ensuring that if one control fails, another one is present to counter a threat.
D is incorrect. A shared responsibility model is one in which a service provider and a subscribing customer both share responsibility for security controls.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
