An unhandled error has occurred.
Reload
X
UIZFORGE
Exams
Pricing
Career Paths
Resources
EN
Login
Sign Up
1
/ 5
Intermediate
A new product is required to be "secure by default." Per CSSLP and CISA "Secure by Design" pledge (2024), what does this OBLIGATE in the requirements baseline?
Ship with safe defaults (no default passwords, MFA on by default, unused features off, automatic updates on); no extra-cost gate on fundamental security features; no customer hardening required to reach baseline security
Offer security as a paid premium tier
Default to permissive settings and let advanced users opt in to security
Restrict secure defaults to the enterprise pricing tier only
AI Tutor
Stuck? Get a hint