Rica works as an incident handler for an international company. As part of her role, she must review the present security policy implemented. Upon inspection, Rica finds that the policy is wide…

Question

Options

• APrudent policy
• BParanoic policy
• CPermissive policy
• DPromiscuous policy

• A
  4% (1)
• C
  85% (22)
• D
  12% (3)

Explanation

A permissive security policy is characterized by allowing all activities except those that are explicitly blocked. This approach starts with a default state of allowing access and functionality, with restrictions applied only to known dangerous services, attacks, or behaviors. Such a policy can lead to a wider attack surface because it assumes services and behaviors are safe unless proven otherwise. A prudent policy would typically involve more conservative security measures, applying necessary restrictions to protect against identified and potential threats. A paranoic policy would be at the extreme end of security measures, possibly blocking more than necessary to ensure the highest level of security, often at the expense of usability or functionality. A promiscuous policy, in contrast, would be even more open than a permissive policy, essentially allowing nearly all traffic or actions with minimal restrictions, which is not what Rica observed.

No community discussion yet for this question.