Complex Security Model Requirements Quiz

What you'll be asked

1. When designing a security model, which principle states that a user should be granted only the minimum levels of access necessary to perform their job functions?
2. A global organization needs to restrict access to sensitive HR records based on the user's department, region, and seniority level. Which security model is best suited for this requirement?
3. To prevent a single user from having enough power to execute a fraudulent transaction, you require two different employees to approve a high-value payment. This is an application of which security concept?
4. Your system architecture uses a 'Defense in Depth' strategy. Which of the following best represents the implementation of this strategy?
5. When architecting a solution for a multi-tenant SaaS application, why is 'Row-Level Security' (RLS) often preferred over 'Application-Level Filtering'?

Answers and explanations come after you submit.