nerdexam
(ISC)2

SSCP · Question #373

In order to enable users to perform tasks and duties without having to go through extra steps it is important that the security controls and mechanisms that are in place have a degree of?

The correct answer is C. Transparency. Transparency is correct because security controls should operate in the background without requiring users to take extra steps or even be aware of them - when security is transparent, it doesn't impede productivity or create friction in normal workflows. A (Complexity) is wrong -

Submitted by lukas.cz· Apr 18, 2026Security Concepts and Practices

Question

In order to enable users to perform tasks and duties without having to go through extra steps it is important that the security controls and mechanisms that are in place have a degree of?

Options

  • AComplexity
  • BNon-transparency
  • CTransparency
  • DSimplicity

How the community answered

(55 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    93% (51)
  • D
    2% (1)

Explanation

Transparency is correct because security controls should operate in the background without requiring users to take extra steps or even be aware of them - when security is transparent, it doesn't impede productivity or create friction in normal workflows.

  • A (Complexity) is wrong - complex security mechanisms create barriers and increase the chance of user error or workarounds, which undermines both usability and security.
  • B (Non-transparency) is wrong - this is essentially the opposite of the goal; opaque, hidden-in-a-bad-way controls that require users to navigate around them create frustration and inefficiency.
  • D (Simplicity) is a tempting distractor, but simplicity refers to how a mechanism is designed, not how it appears to the user. A simple control can still interrupt workflow; a transparent one does not.

Memory tip: Think of a glass door - it's transparent, so you walk through without noticing the barrier. Security transparency works the same way: protection is there, but users don't have to "see" or interact with it to get their work done.

Topics

#Security Design Principles#Usability#User Experience#Security Controls

Community Discussion

No community discussion yet for this question.

Full SSCP Practice