nerdexam
GIAC

GSLC · Question #344

Which of the following is NOT a principle and practice of the 'Minimize the number of highconsequence targets' principle?

The correct answer is D. Principle of trusted entities from untrusted entities. The 'Minimize the number of high-consequence targets' principle includes least privilege, separation of privileges and duties, and domain separation. Separating trusted from untrusted entities belongs to a different security principle.

Security Architecture & Engineering

Question

Which of the following is NOT a principle and practice of the 'Minimize the number of highconsequence targets' principle?

Options

  • APrinciple of least privilege
  • BPrinciple of separation of privileges, duties, and roles
  • CPrinciple of separation of domains
  • DPrinciple of trusted entities from untrusted entities

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    5% (2)
  • D
    89% (33)

Why each option

The 'Minimize the number of high-consequence targets' principle includes least privilege, separation of privileges and duties, and domain separation. Separating trusted from untrusted entities belongs to a different security principle.

APrinciple of least privilege

The principle of least privilege is a core practice under this principle because restricting each account or process to the minimum required access reduces the value of any single entity as a high-consequence target.

BPrinciple of separation of privileges, duties, and roles

Separation of privileges, duties, and roles distributes authority so that no single user or process accumulates enough privilege to become a catastrophic single point of failure or high-value target.

CPrinciple of separation of domains

Separation of domains isolates systems and data into distinct security zones, directly limiting the blast radius of a compromise and reducing the concentration of high-consequence assets in one place.

DPrinciple of trusted entities from untrusted entitiesCorrect

The principle of separating trusted entities from untrusted entities is associated with trust boundary management and isolation principles, not with the goal of minimizing high-consequence targets. The 'Minimize the number of high-consequence targets' principle focuses on reducing the privilege, value, and attack surface of individual assets so that compromising any single one causes limited damage. Trusted-versus-untrusted separation addresses how systems interact across trust levels, which is a separate design concern.

Concept tested: Security design principles - minimizing high-consequence targets

Source: https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/final

Topics

#least privilege#separation of duties#security principles#minimize attack surface

Community Discussion

No community discussion yet for this question.

Full GSLC Practice