- Least Privilege
- Fail-Safe Defaults
- Economy of Mechanism
- Complete Mediation
- Open Design
- Separation of Privilege
- Least Common Mechanism
- Psychological Acceptability
https://medium.com/strike-sh/rest-security-design-principles-434bd6ee57ea
The correct answer is D. OAuth.
Explanation: One primary security design principle for REST APIs is OAuth, which is an open standard for access delegation commonly used as a way to grant websites or applications limited access to user information without exposing passwords. OAuth provides a secure and scalable approach to handling authentication and authorization for RESTful services.
If the question is asking for a REST API-specific security mechanism:
The answer is D. OAuth.
OAuth is a widely used framework for securing REST APIs, providing token-based authentication and authorization.
If the question is asking for a general security design principle:
The answer is A. Fail-safe defaults.
Fail-safe defaults are a fundamental principle of secure design, ensuring that access is denied unless explicitly permitted.
Hence, Answer is A.
A is correct
Fail-safe defaults involve designing systems in a way that even if specific security measures are not explicitly configured.
This principle ensures that security is not accidentally compromised due to misconfigurations or oversight.
Fail-Safe Defaults
A user’s default access level to any resource in the system should be “denied” unless they have been granted a “permit” explicitly.
upvoted 4 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
aaabattery
Highly Voted 1Â year, 9Â months ago16561f6
Most Recent 3Â months, 1Â week agoNeil101
5Â days, 15Â hours ago[Removed]
7Â months, 2Â weeks agonushadu
2Â years ago