Quiz on Secure Software Design and Architecture

What is the primary goal of security design principles?

• To map security requirements to security mechanisms

• To increase the number of privileges

• To create complex systems

• To avoid using existing technologies

What does the principle of Least Privilege entail?

• Privileges should be granted based on seniority

• All users should have the same access

• Every subject should have only necessary privileges

• Every subject should have maximum privileges

Which principle ensures access to every object is controlled?

• Complete Mediation

• Open Design

• Defense in Depth

• Minimum Exposure

What is the rationale behind Secure, fail-safe defaults?

• To allow maximum access by default

• To minimize the need for security checks

• To complicate user access

• To ensure systems start in a secure state

What does Compartmentalization aim to achieve?

• To minimize the number of security checks

• To allow all users access to all resources

• To increase the attack surface

• To isolate resources into groups

Which principle focuses on minimizing the attack surface?

• Defense in Depth

• Minimum Exposure

• Economy of Mechanism

• Least Common Mechanism

What does Open Design advocate for?

• Disclosure of system internals

• Secrecy of design

• Security through obscurity

• Simplicity in design

What is the main idea behind Economy of Mechanism?

• Security should be expensive

• All mechanisms should be hidden

• Simplicity minimizes exploitable vulnerabilities

• Complex systems are more secure

What does Defense in Depth involve?

• Minimizing security checks

• Allowing shared access mechanisms

• Using multiple layers of security mechanisms

• Relying on a single security measure

What is the principle of Least Common Mechanism?

• Allowing multiple users to access sensitive data

• Using the same password for all users

• Avoiding shared mechanisms for access

• Sharing access mechanisms among users