GSLC · Question #344
Which of the following is NOT a principle and practice of the 'Minimize the number of highconsequence targets' principle?
The correct answer is D. Principle of trusted entities from untrusted entities. The 'Minimize the number of high-consequence targets' principle includes least privilege, separation of privileges and duties, and domain separation. Separating trusted from untrusted entities belongs to a different security principle.
Question
Which of the following is NOT a principle and practice of the 'Minimize the number of highconsequence targets' principle?
Options
- APrinciple of least privilege
- BPrinciple of separation of privileges, duties, and roles
- CPrinciple of separation of domains
- DPrinciple of trusted entities from untrusted entities
How the community answered
(37 responses)- A3% (1)
- B3% (1)
- C5% (2)
- D89% (33)
Why each option
The 'Minimize the number of high-consequence targets' principle includes least privilege, separation of privileges and duties, and domain separation. Separating trusted from untrusted entities belongs to a different security principle.
The principle of least privilege is a core practice under this principle because restricting each account or process to the minimum required access reduces the value of any single entity as a high-consequence target.
Separation of privileges, duties, and roles distributes authority so that no single user or process accumulates enough privilege to become a catastrophic single point of failure or high-value target.
Separation of domains isolates systems and data into distinct security zones, directly limiting the blast radius of a compromise and reducing the concentration of high-consequence assets in one place.
The principle of separating trusted entities from untrusted entities is associated with trust boundary management and isolation principles, not with the goal of minimizing high-consequence targets. The 'Minimize the number of high-consequence targets' principle focuses on reducing the privilege, value, and attack surface of individual assets so that compromising any single one causes limited damage. Trusted-versus-untrusted separation addresses how systems interact across trust levels, which is a separate design concern.
Concept tested: Security design principles - minimizing high-consequence targets
Source: https://csrc.nist.gov/publications/detail/sp/800-160/vol-1/final
Topics
Community Discussion
No community discussion yet for this question.