Which security principle does this approach align with?

Rationale

Complete mediation.

This principle ensures that all access to resources is controlled and verified, preventing unauthorized actions. By enforcing a check at every access point, complete mediation provides a robust security framework that maintains the integrity of the system.

A (Psychological acceptability) YOUR ANSWER

This principle focuses on designing security measures that users find easy to understand and use, ensuring that security protocols do not hinder usability. While psychological acceptability is important for user compliance, it does not directly relate to the verification of every access request.

B (Complete mediation) CORRECT

This principle mandates that every access attempt to a resource must be validated, ensuring that security policies are consistently enforced. It is essential for preventing unauthorized access and maintaining system integrity, aligning perfectly with the described approach.

C (Open design) YOUR ANSWER

Open design advocates for security mechanisms that are transparent and not reliant on secrecy. While it promotes security through diversity and scrutiny, it does not inherently involve the verification of every access request, which is essential for complete mediation.

D (Separation of duties) YOUR ANSWER

This principle divides responsibilities among different individuals or roles to reduce the risk of fraud or error. While separation of duties enhances security by ensuring no single individual has full control, it does not specifically address the need for every access to be mediated.

Conclusion

Complete mediation is a crucial principle in security that insists on verifying every access request to resources, thereby upholding system integrity. The other principles—psychological acceptability, open design, and separation of duties—address different aspects of security and usability but do not focus on the necessity of constant validation. Understanding these principles helps in designing systems that not only secure data but also maintain user trust and compliance.

Which security principle does this approach align with?

Complete mediation.

Related Questions

Related Quizzes

How familiar were you with this question?

Report an Issue

Rate this Practice Test