Secure Design Principles

Correct Answer: Use HTTPS for secure communication.

Using HTTPS ensures secure communication with SSL/TLS and encrypts sensitive data during transmission. Storing sensitive data in cookies without encryption and using HTTP with plain text communication increases security risks. A simple password authentication mechanism is not enough protection for sensitive data. Disabling SSL/TLS certificates compromises security. Using symmetric key algorithms only is not the best solution as HTTPS combines symmetric and asymmetric key algorithms for optimal security.

Correct Answer: Implement VLANs with proper access control.

Virtual LANs (VLANs) allow proper network segmentation, limiting access to sensitive data and reducing the attack surface. Using the same network for all departments without proper access control, removing firewalls and intrusion detection systems, connecting all devices to a single switch, and implementing a single WAP for all departments compromise network security and expose sensitive data. A shared VPN doesn't address network segmentation.

Correct Answer: Implement multiple layers of physical security controls.

Implementing multiple layers of physical security controls, such as layered access control, security cameras, monitoring systems, and strong authentication mechanisms, ensures that only authorized personnel have access to the data centers. Removing security cameras, providing all employees access, avoiding strong authentication mechanisms, implementing a single access point without monitoring, and disabling alarms and intrusion detection systems compromise security.