Security design principles in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What does the principle of Least Privilege mean in cloud security?

It means giving users and systems only the minimum access rights they need to do their job, nothing more. This reduces the risk of accidental or intentional misuse.

beginner

Explain the Defense in Depth principle.

Defense in Depth means using multiple layers of security controls so if one layer fails, others still protect the system. Think of it like having a locked door, alarm, and security cameras all working together.

intermediate

Why is Fail Securely important in security design?

Fail Securely means that if a system fails or crashes, it should do so in a way that does not expose sensitive data or open security holes. It avoids making the system less safe during errors.

intermediate

What is the purpose of Separation of Duties in security?

Separation of Duties means dividing responsibilities among different people or systems so no single person or system can cause harm alone. This helps prevent fraud and mistakes.

beginner

Describe the Secure by Default principle.

Secure by Default means systems should come with the safest settings turned on from the start, so users don’t have to configure security manually to be protected.

Which principle means giving users only the access they need?

A Defense in Depth

B Least Privilege

C Fail Securely

D Separation of Duties

Least Privilege limits access rights to the minimum necessary.

What does Defense in Depth provide?

A Open access for convenience

B Single strong password

C Multiple layers of security

D No security needed

Defense in Depth uses several security layers to protect systems.

Why is Separation of Duties important?

A To divide responsibilities and reduce risk

B To speed up processes by combining roles

C To allow one person full control

D To remove all security checks

Separation of Duties divides tasks to prevent fraud or mistakes.

What should happen when a system fails according to Fail Securely?

A Ignore the failure

B Crash without any protection

C Expose data for troubleshooting

D Fail without exposing security risks

Fail Securely means failures do not create security holes.

Secure by Default means:

A Systems come with safe settings enabled

B Systems have no security settings

C Security is optional

D Users must configure security manually

Secure by Default means safe settings are on from the start.

Explain the principle of Least Privilege and why it is important in cloud security.

Think about giving only what is needed, like a key that opens only one door.

Describe how Defense in Depth protects cloud systems.

Imagine several fences around a house instead of just one.