Web Security · Middle · Question 61 of 75
Why is "deny by default" the safer authorization policy?
- 1Because it removes the need for authentication
- ✓Correct answer: A forgotten rule then blocks access instead of silently allowing it
- 3Because it makes requests faster
Explanation
New endpoints and fields appear all the time. Requiring an explicit allow rule means mistakes fail closed.