hardMultiple ChoiceObjective-mapped
ISC2 CC Practice Question: A security analyst discovers that an…
A security analyst discovers that an organization's firewall rule set allows all inbound traffic on TCP port 443 from any source to a single web server. Additionally, the server has a known critical vulnerability in its TLS implementation. Which principle of security architecture is most directly violated by this configuration?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Least privilege
Least privilege is the principle that users and systems should be granted only the minimum necessary permissions to perform their functions. In this scenario, allowing all inbound traffic on TCP 443 from any source to a single web server violates least privilege because it permits access from any IP address worldwide, when only specific sources (e.g., the organization's IP ranges) are needed. The additional vulnerability in TLS is irrelevant to the principle itself; the core issue is the overly permissive firewall rule. Options B, C, and D describe different principles that are not the most directly violated. Defense in depth would be about having multiple layers of security, separation of duties is about dividing responsibilities, and fail-safe defaults is about default-deny posture. Therefore, the most direct violation is least privilege.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Least privilege
Why this is correct
The rule allows any source, which is the broadest possible privilege, violating the principle of least privilege.
- ✗
Defense in depth
Why it's wrong here
While layering is lacking, the most direct violation is allowing unnecessary broad access, i.e., least privilege.
- ✗
Separation of duties
Why it's wrong here
Separation of duties concerns dividing responsibilities among multiple people, not network access rules.
- ✗
Fail-safe defaults
Why it's wrong here
Fail-safe means default deny; the rule explicitly allows, so it's a failure of least privilege, not fail-safe per se.
Visual reference
Go deeper
Related to this question
Learn chapter
Introduction to Security Principles
Key term
Firewall rule
A firewall rule is a set of conditions that tells a firewall which network traffic to allow or block based on attributes like source, destination, port, and protocol.
Key term
Firewall
A firewall is a network security system that monitors and controls incoming and outgoing traffic based on predetermined security rules to protect trusted internal networks from untrusted external networks.
About these practice questions
One of 976 original CC practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.