Secure Design Principles

Question 1

Zero Trust

Answer 1

Focuses on protecting resources to design enterprise infrastructure and not network segments or location. Assumes no implicit trust based on physical or network location. Performs authentication and authorization as distinct tasks before a session is established.

Question 2

Secure by design

Answer 2

app developed with security integrated into the entire SDLC

Question 3

Secure by deployment

Answer 3

app deployed into an environment where security is considered in the network and system design

Question 4

Secure by default

Answer 4

app design assumed natively secure