Which of these is NOT a security principle?

Question

Options

• ASecurity Awareness Training
• BLeast Privilege
• CZero Trust model
• DSecurity Awareness Training refers to educational programs that teach users to recognize and

• A
  92% (44)
• B
  2% (1)
• C
  4% (2)
• D
  2% (1)

Explanation

Security Awareness Training is a security control and program - it is something you implement to reduce risk. It is not a foundational security principle. Security principles are foundational concepts that guide the design of secure systems, such as Least Privilege (B, granting only the minimum access necessary) and Zero Trust (C, never trust, always verify). Training is valuable and important, but it belongs in the category of administrative controls, not core security design principles.

No community discussion yet for this question.