WGU Network and Security Foundation Exam - Topic 2 Question 5 Discussion

Actual exam question for WGU's Network and Security Foundation exam

Question #: 5
Topic #: 2

[All Network and Security Foundation Questions]

A company's internal messaging system is being redesigned. The authentication procedures were so cumbersome that employees were using personal email to communicate.

What is the security principle implemented in this scenario?

AZero-trust model

BLeast common mechanism

CPsychological acceptability

DFail-safe

Show Suggested Answer

Suggested Answer: C

Psychological acceptability states that security measures should be user-friendly and not overly burdensome. If security controls are too complex, users may bypass them, leading to weaker security. In this case, employees used personal email because authentication procedures were too cumbersome.

Zero-trust model enforces strict access control, not usability.

Least common mechanism limits shared resources.

Fail-safe ensures secure failure handling, not usability.

by Janet at Nov 24, 2025, 02:24 AM

Limited Time Offer

25%

Off

Get Premium Network and Security Foundation Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Audrie

1 month ago

C) makes sense. A user-friendly system keeps everyone secure.

upvoted 0 times

...

Nieves

2 months ago

I lean towards B) Least common mechanism. Simplifying access is key.

upvoted 0 times

...

Detra

2 months ago

True, but if they can't use it, what's the point?

upvoted 0 times

...

Cristal

2 months ago

But isn't A) Zero-trust model more relevant? Trust no one, right?

upvoted 0 times

...

Pamella

2 months ago

Agreed! If it's too hard, they'll just bypass it.

upvoted 0 times

...

Shaunna

2 months ago

Hmm, I’m not sure about that. Could it really be C?

upvoted 0 times

...

My

2 months ago

I’d say B) Least common mechanism fits here too. Simplifying access is key.

upvoted 0 times

...

Hana

3 months ago

Surprised they were using personal emails! That’s a big security risk.

upvoted 0 times

...

Erasmo

3 months ago

I disagree, I think it’s more about A) Zero-trust model.

upvoted 0 times

...

Ligia

3 months ago

I'm just glad they're not using the classic "password123" for their internal messaging. Fail-safe is the way to go!

upvoted 0 times

...

Rasheeda

4 months ago

Haha, I bet the employees were using their dog's birthday as the password. Gotta love that psychological acceptability!

upvoted 0 times

...

Jame

4 months ago

B. Least common mechanism. The company should minimize the number of components or mechanisms required for authentication, reducing the attack surface and potential vulnerabilities.

upvoted 0 times

...

Matthew

4 months ago

A. Zero-trust model. The company needs to verify every user, device, and action, regardless of their location or network, to ensure the system is secure.

upvoted 0 times

...

An

4 months ago

D. Fail-safe seems like the best option here. If the authentication process is too complex, the system should fail in a way that doesn't compromise security, like locking out the user instead of allowing them to bypass it.

upvoted 0 times

...

Stephaine

4 months ago

I remember studying the zero-trust model, but that doesn’t seem to fit this scenario as well as psychological acceptability does.

upvoted 0 times

...

Gilbert

4 months ago

I'm not entirely sure, but I remember a practice question about user-friendly systems. Could it be psychological acceptability?

upvoted 0 times

...

Cordell

5 months ago

I think this might relate to the psychological acceptability principle since the old system was too complicated for users.

upvoted 0 times

...

Thurman

5 months ago

I think the answer here is C) Psychological acceptability. The cumbersome authentication procedures were causing employees to bypass the system, which goes against the principle of making security measures intuitive and user-friendly.

upvoted 0 times

...

Anissa

5 months ago

I'm a bit confused by this question. The scenario talks about a security issue, but the options seem to be about different security principles. I'll need to make sure I understand each principle before selecting an answer.

upvoted 0 times

...

Lourdes

5 months ago

I think it's C) Psychological acceptability. Employees need a system they can actually use.

upvoted 0 times

...

Anisha

5 months ago

Okay, let's see. The company's authentication procedures were so cumbersome that employees were using personal email instead. That sounds like the principle of psychological acceptability was not being followed. The system was not user-friendly, so employees found a workaround.

upvoted 0 times

...

Luther

5 months ago

Definitely C) Psychological acceptability. It’s all about making it user-friendly.

upvoted 0 times

...

Kattie

6 months ago

I feel like the least common mechanism could apply here too, but it seems more about user experience than security.

upvoted 0 times

...

Leanora

6 months ago

I think the answer is C. Psychological acceptability. The cumbersome authentication procedures were causing employees to use personal email, which is a security risk. The company needs to design a system that is user-friendly and acceptable to employees.

upvoted 0 times

...

Rose

6 months ago

Hmm, this is a tricky one. The question is asking about the security principle that was implemented, not violated. I'll need to carefully consider each option and how it relates to the situation described.

upvoted 0 times

...

Alaine

6 months ago

I think this is asking about the security principle that was violated by the employees using personal email. The options seem to point to different security principles, so I'll need to think through which one best fits the scenario.

upvoted 0 times