Multiple choice technology web technology

Each of the following is a "security best practice" when working with the webMethods Integration Server EXCEPT:

  1. Users and Software should be granted the fewest privledges necessary to perform their tasks

  2. System access should be permitted only where explicitly granted; the default should be to deny access

  3. The system configuration should be as simple as possible

  4. System access should be restricted only where explicitly necessary; the default should be to grant access to everything

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Security best practices follow the principle of least privilege (fewest access rights necessary) and default deny. Option D describes the opposite approach (default grant access), which violates security principles.