Suggested Answer:B🗳️
Access control mechanisms should default to no access to provide the necessary level of security and ensure that no security holes go unnoticed. If access is not explicitly allowed, it should be implicitly denied. Source: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, Chapter 4: Access Control (page 143).
Granting access solely based on trust can lead to security vulnerabilities if users with excessive access privileges are compromised or if their trustworthiness changes over time. Instead, access control decisions should be based on the specific roles, responsibilities, and tasks that individuals need to perform.
C is talking about the level of trust. Not trustworthiness. The level of trust can be based on factors such as their role, history, or level of responsibility.
upvoted 1 times
...
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
mansour975
11 months, 2 weeks agoRixster
1 year, 2 months agoswiggharo
10 months, 2 weeks ago