CSSLP · Question #161
Which of the following statements are true about declarative security? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is A. It is employed in a layer that relies outside of the software code or uses attributes of the code. B. It applies the security policies on the software applications at their runtime. D. In this security, the security decisions are based on explicit statements. Declarative security applies security policies at runtime by relying on configurations outside the software code or using code attributes, with decisions based on explicit statements.
Question
Which of the following statements are true about declarative security? Each correct answer represents a complete solution. Choose all that apply.
Options
- AIt is employed in a layer that relies outside of the software code or uses attributes of the code.
- BIt applies the security policies on the software applications at their runtime.
- CIn this security, authentication decisions are made based on the business logic.
- DIn this security, the security decisions are based on explicit statements.
How the community answered
(39 responses)- A90% (35)
- C10% (4)
Why each option
Declarative security applies security policies at runtime by relying on configurations outside the software code or using code attributes, with decisions based on explicit statements.
Declarative security involves defining security policies using metadata, annotations, or configuration files that are external to the main application logic, rather than embedding security checks directly in the code.
The security policies defined declaratively are enforced by the application server or runtime environment during the execution of the application, dynamically applying access controls.
Authentication and authorization decisions in declarative security are typically based on predefined roles or permissions specified in configuration, not on the application's business logic, which is more characteristic of programmatic security.
Declarative security relies on explicit statements, such as role-based access control annotations or XML configuration entries, to define who can access what resources without requiring programmatic checks.
Concept tested: Software Security - Declarative Security
Source: https://learn.microsoft.com/en-us/previous-versions/aspnet/ms972960(v=msdn.10)?redirectedfrom=MSDN
Topics
Community Discussion
No community discussion yet for this question.