Which practice is an application of the least common mechanism principle?

Using a single authentication server

Using a single shared library for all applications

Isolating processes in separate sandboxes

Granting all users the same permissions

In a Zero Trust architecture, which practice best exemplifies the principle of least privilege?

Providing just-in-time administrative access only when needed

Using a single shared account for all administrators

Granting permanent full access to all cloud resources

Granting all employees access to all systems by default

Certified Secure Software Lifecycle Professional

Domain 1Objective 2

Understand Security Design Principles CSSLP Practice Questions (Page 3)

Part of the Secure Software Concepts domain, which accounts for 12% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–14 in this domain), expect 4–7 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

10concepts

12%of the exam

Questions 11–15

11foundation · easy
Which practice is an application of the least common mechanism principle?
Select an answer first
12foundation · easy
Which security design principle focuses on making security mechanisms easy to use so that users are more likely to comply?
Select an answer first
13foundation · easy
In a Zero Trust architecture, which practice best exemplifies the principle of least privilege?
Select an answer first
14application · medium
A network architect is designing a system that must remain available even if a single server fails. The architect plans to use a cluster of servers with automatic failover. Which resiliency concept is being applied?
Select an answer first
15foundation · easy
Which security principle requires that no single individual be able to complete a critical transaction alone?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.

Understand Security Design Principles CSSLP Practice Questions (Page 3)

Questions 11–15

Which practice is an application of the least common mechanism principle?

Which security design principle focuses on making security mechanisms easy to use so that users are more likely to comply?

In a Zero Trust architecture, which practice best exemplifies the principle of least privilege?

A network architect is designing a system that must remain available even if a single server fails. The architect plans to use a cluster of servers with automatic failover. Which resiliency concept is being applied?

Which security principle requires that no single individual be able to complete a critical transaction alone?

Keep studying — Secure Software Concepts