MENU
Which secure software design principle assumes attackers have the source code and specifications of the product?
Suggested Answer: A
Get Premium Secure Software Design (D487) Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
LE
Letha
6 months ago
Open Design helps in identifying vulnerabilities early on.
HO
Howard
6 months ago
D) Separation of Privileges is good, but A is the best fit.
DO
Dorinda
6 months ago
C) Total Mediation seems less relevant here.
RE
Rene
6 months ago
I feel B) Psychological Acceptability is important too, but not for this question.
TH
Theron
6 months ago
Agreed! Open Design is crucial for security.
FA
Fatima
7 months ago
Yup, Open Design assumes attackers know the ins and outs!
CH
Cherri
7 months ago
I thought it was more about user experience, not just code access.
CA
Casandra
7 months ago
Wait, are we sure about that? Sounds too simple.
MI
Miles
8 months ago
Totally agree, Open Design is key!
DE
Delpha
8 months ago
It's definitely A) Open Design.
JA
Jamey
8 months ago
Open Design, huh? I guess that makes sense if the bad guys know all your secrets already.
GE
Georgene
8 months ago
B) Psychological Acceptability? Really? That's not even close to the right principle here.
DA
Davida
8 months ago
I'm going with C) Total Mediation. Sounds like it could be the right answer.
SH
Shenika
8 months ago
D) Separation of Privileges is a good security principle, but it doesn't assume the attacker has the source code.
SH
Shaun
9 months ago
A) Open Design is the correct answer. Attackers having the source code is a key assumption of this principle.
CH
Cheryl
9 months ago
I feel like I’ve seen a question like this before, but I can't recall if it was about Open Design or something else.
CA
Cassi
9 months ago
I remember studying about secure design principles, and Open Design definitely sounds familiar. It’s about transparency, right?
CH
Chaya
9 months ago
I think the principle that assumes attackers have access to the source code is Open Design, but I'm not entirely sure.
LE
Leeann
9 months ago
Okay, I'm going to go with C) Total Mediation. That principle ensures all access to resources is checked, even if the attacker has the source code.
BE
Beula
9 months ago
You know, I think I remember learning about this in class. Let me think it through carefully before answering.
JA
Jamal
10 months ago
I think it's A) Open Design. Makes sense to assume attackers know the code.
CA
Carmen
10 months ago
Wait, I'm not sure about that. Isn't Separation of Privileges also based on the assumption that the attacker has access to the system?
EN
Ena
10 months ago
I thought Total Mediation was related to access control, but now I'm questioning if it could be the answer here.
RO
Rolland
10 months ago
Hmm, I'm stumped. Guess I'll have to go with my gut and choose A) Open Design.
PA
Paz
11 months ago
I'm pretty sure it's A) Open Design. That principle assumes the attacker has full knowledge of the system.
EV
Evangelina
11 months ago
Hmm, this one seems tricky. I think the key is to focus on the "assume attackers have the source code" part of the question.
TH
Thomasena
5 months ago
True, but for this question, A seems the most relevant.
JO
Johnetta
5 months ago
But what about D) Separation of Privileges? Isn’t that important too?
DE
Detra
5 months ago
I’m leaning towards A too. It’s all about transparency.
MA
Marlon
6 months ago
Yeah, that makes sense! Attackers knowing the code changes everything.
JE
Jess
10 months ago
I think it’s definitely A) Open Design.