Which policy is described as wide open and only known dangerous services or behaviors are blocked?

Which policy is described as wide open and only known dangerous services or behaviors are blocked?

• A. Promiscuous Policy
• B. Permissive Policy
• C. Prudent Policy
• D. Paranoid Policy

Answer: (B)

A permissive security posture means the default stance is to allow most activity, with blocks only applied to known dangerous services or behaviors. This describes a system that is wide open and uses a blacklist approach to protect itself — you permit by default and blacklist the risky items. That makes it the best fit for the description, because it directly matches the idea of broad access with selective blocking. In contrast, a paranoid policy would be the opposite—default-deny and very restrictive. A prudent policy aims for balance, tightening controls without being overly permissive. The term Promiscuous policy isn’t a standard, formal label for a security posture and can be misleading.

A permissive security posture means the default stance is to allow most activity, with blocks only applied to known dangerous services or behaviors. This describes a system that is wide open and uses a blacklist approach to protect itself — you permit by default and blacklist the risky items.

That makes it the best fit for the description, because it directly matches the idea of broad access with selective blocking. In contrast, a paranoid policy would be the opposite—default-deny and very restrictive. A prudent policy aims for balance, tightening controls without being overly permissive. The term Promiscuous policy isn’t a standard, formal label for a security posture and can be misleading.