nerdexam
(ISC)2

CSSLP · Question #212

Which of the following security design principles supports comprehensive and simple design and implementation of protection mechanisms, so that an unintended access path does not exist or can be…

The correct answer is B. Economy of mechanism. The security design principle of economy of mechanism advocates for simple, small, and comprehensible security designs to minimize potential vulnerabilities and unintended access paths.

Secure Software Architecture and Design

Question

Which of the following security design principles supports comprehensive and simple design and implementation of protection mechanisms, so that an unintended access path does not exist or can be readily identified and eliminated?

Options

  • ALeast privilege
  • BEconomy of mechanism
  • CPsychological acceptability
  • DSeparation of duties

How the community answered

(54 responses)
  • A
    2% (1)
  • B
    93% (50)
  • C
    4% (2)
  • D
    2% (1)

Why each option

The security design principle of economy of mechanism advocates for simple, small, and comprehensible security designs to minimize potential vulnerabilities and unintended access paths.

ALeast privilege

Least privilege states that a user or process should be granted only the minimum necessary permissions to perform its function, focusing on access rights rather than design complexity.

BEconomy of mechanismCorrect

Economy of mechanism is a security design principle that emphasizes keeping security mechanisms as simple and small as possible. This simplicity reduces the chances of errors, unintended interactions, and hidden flaws, making it easier to verify their correctness and ensure that no unintended access paths exist.

CPsychological acceptability

Psychological acceptability refers to the ease of use and acceptance of security mechanisms by users, ensuring they do not hinder productivity, rather than the simplicity of the underlying design.

DSeparation of duties

Separation of duties requires dividing critical tasks among multiple individuals to prevent fraud or error, focusing on administrative controls rather than the technical design simplicity of protection mechanisms.

Concept tested: Security design principles

Source: https://learn.microsoft.com/en-us/security/benchmark/azure/security-controls-v3-design-architecture#da-2-implement-security-principles

Topics

#Security Design Principles#Economy of Mechanism#Secure Design#Vulnerability Reduction

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CSSLP Practice