A financial application encounters an unexpected error during transaction processing. Which secure design principle should be applied to ensure the system does not default to an insecure state?
'Fail securely' is the correct secure design principle to apply in this scenario. When a system encounters an error or failure condition, it should default to a secure state rather than an insecure one. In practice, this means that when the financial application encounters an unexpected error, it should reject transactions by default rather than accidentally approving them, maintain access restrictions rather than opening them, and preserve security controls even during failure modes.
Other options are incorrect because:
Secure defaults refers to systems being deployed with secure initial configurations.
Defense in depth involves implementing multiple security controls in layers.
Least privilege concerns limiting user access rights to only what's necessary for their job function.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What does 'fail securely' mean in the context of cybersecurity?
Open an interactive chat with Bash
How does 'secure defaults' differ from 'fail securely'?
Open an interactive chat with Bash
Can you explain 'defense in depth' and how it relates to secure design principles?
Open an interactive chat with Bash
ISC2 CISSP
Security Architecture and Engineering
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access