Understand Security Design Principles CSSLP Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which security concept involves reusing existing, well-tested components to avoid introducing new vulnerabilities?

   • AComplete mediation
   • BComponent reuse
   • CLeast privilege
   • DOpen design
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which security strategy uses multiple layers of controls so that if one control fails, another is still in place?

   • AOpen design
   • BDefense in depth
   • CLeast privilege
   • DPsychological acceptability
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which aspect of defense in depth involves using different types of controls rather than more of the same?

   • AComplete mediation
   • BGeographical diversity
   • CLeast privilege
   • DTechnical diversity
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which resiliency mechanism automatically switches operations to a redundant system when the primary system fails?

   • AFail secure
   • BComplete mediation
   • CFailover
   • DLeast privilege
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A small business wants to reduce the number of passwords employees must remember. They are considering implementing a single sign-on (SSO) solution that integrates with their existing identity provider. The security team is concerned about the impact on user experience and support costs. Which principle does SSO primarily support, and what is a key security consideration?

   • ADefense in depth; the SSO service should be isolated from the network
   • BOpen design; the SSO implementation should be publicly reviewed
   • CEconomy of mechanism; the SSO service becomes a high-value target
   • DLeast privilege; users should only have access to a subset of applications
   Reveal Solution Discussion Select an answer first