Palo Alto Networks Certified Cybersecurity Entry-level Technician (PCCET)Cybersecurity FundamentalsMedium
A cybersecurity consultant is advising a small business on fundamental security principles. The consultant emphasizes that all systems and applications should be designed with security in mind from the very beginning of their development lifecycle, rather than adding security as an afterthought. Which security model or principle is the consultant advocating?
- AZero Trust
- BLeast Privilege
- CDefense in Depth
- DSecurity by Design
Show answer & explanationAnswer & explanation
Correct answer: D. Security by Design
Security by Design advocates for integrating security considerations throughout the entire development lifecycle from the initial design phase, rather than retrofitting them later. This aligns perfectly with the consultant's advice.
Why the other options are wrong
- A. Zero Trust assumes no implicit trust and verifies every access attempt, which is an operational model.
- B. Least Privilege grants users only the minimum necessary access, which is an access control principle.
- C. Defense in Depth involves multiple layers of security controls, not primarily about the development process.
Security by Design
A proactive approach to cybersecurity that integrates security considerations into every stage of a system's or application's development lifecycle.
- Prioritizes security from initial concept to deployment.
- Aims to prevent vulnerabilities rather than fix them post-release.
- Reduces the cost and effort of remediation later.
Memory trick: Build it secure from the ground up, don't just patch it up!